Netgear RT311 RT314 Reference Manual - Page 75

Configuring Filters, Router Filter Structure

Get Netgear RT311 PDF manuals and user guides
UPC - 606449004175
View all Netgear RT311 manuals
Add to My Manuals
Save this manual to your list of manuals

Page 75 highlights

Chapter 7 Configuring Filters This chapter provides information about configuring and using filters for your Model RT311 or RT314 Internet Access Gateway Router. Filters are used to block certain packets, reduce traffic, and prevent security breaches. The router uses packet filters to determine whether to allow or deny passage of each data packet, based on information found in the packet. A filter is defined by rules declaring what information is to be checked and what action is to be taken (forward or discard) when a match is found. Two types of packet filters are supported by the router: IP protocol filters and generic or "device" filters. An IP protocol filter screens the packet based on IP address and port information contained in the packet. A generic filter looks for a specified pattern of bits at a specified location in the packet. In the configuration of IP filters, it is necessary to specify ports and protocols by their assigned numbers instead of names. A comprehensive list of protocol and port numbers for common IP traffic can be found in IETF RFC1700, "Assigned Numbers." Many common port numbers are also listed on any Windows PC in a file called \windows\services. The Model RT311 and RT314 routers allow you to customize filter sets according to your needs. The following sections describe how to configure the filter sets for your router. Router Filter Structure You can configure up to 12 filter sets, each with up to six rules. For IP packets, these rules involve comparing the protocol type of a data packet (for example, TCP, UDP), source or destination address, or port number. Also, a generic filter may be defined to merely test for a byte or pattern of bytes in a particular location in the packet. When a rule is met (or not met), a user-specified action is taken. This action may be to forward the packet, drop the packet, or go to the next rule. Configuring Filters 7-1

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
Configuring Filters
7-1
Chapter 7
Configuring Filters
This chapter provides information about configuring and using filters for your Model RT311 or
RT314 Internet Access Gateway Router.
Filters are used to block certain packets, reduce traffic, and prevent security breaches. The router
uses packet filters to determine whether to allow or deny passage of each data packet, based on
information found in the packet. A filter is defined by rules declaring what information is to be
checked and what action is to be taken (forward or discard) when a match is found. Two types of
packet filters are supported by the router: IP protocol filters and generic or “device” filters. An IP
protocol filter screens the packet based on IP address and port information contained in the packet.
A generic filter looks for a specified pattern of bits at a specified location in the packet.
In the configuration of IP filters, it is necessary to specify ports and protocols by their assigned
numbers instead of names. A comprehensive list of protocol and port numbers for common IP
traffic can be found in IETF RFC1700, “Assigned Numbers.” Many common port numbers are
also listed on any Windows PC in a file called \windows\services.
The Model RT311 and RT314 routers allow you to customize filter sets according to your needs.
The following sections describe how to configure the filter sets for your router.
Router Filter Structure
You can configure up to 12 filter sets, each with up to six rules. For IP packets, these rules involve
comparing the protocol type of a data packet (for example, TCP, UDP), source or destination
address, or port number. Also, a generic filter may be defined to merely test for a byte or pattern of
bytes in a particular location in the packet. When a rule is met (or not met), a user-specified action
is taken. This action may be to forward the packet, drop the packet, or go to the next rule.