Draytek Vigor2960 series User Manual page 115

Item
Rule
Enable This Profile
Time Profile
Source IP
Destination IP
Service Type
Input Interface
Output Interface
Fragments
Action
Syslog
Vigor2960 Series User's Guide
Description
Type the name of the IP filter rule.
Check the box to enable this profile.
Choose a schedule profile to be applied on such rule.
You can click to create another new time object profile.
Choose one or more IP object profiles from the drop down
list. The selected profile will be treated as source IP.
You can click to create another new IP object profile.
Choose one or more IP object profiles from the drop down
list. The selected profile will be treated as destination IP.
You can click to create another new IP object profile.
Choose one or more service type object profiles from the
drop down list. The selected profile will be treated as service
type.
You can click to create another new service type object
profile.
Choose one of the LAN or WAN profiles as data receiving
interface.
Choose one of the LAN or WAN profiles as data
transmitting interface.
Specify the action for fragmented packets.
do_not_care -No action will be taken towards fragmented
packets.
unfragment - Apply the rule to unfragmented packets.
fragment - Apply the rule to fragmented packets.
The action to be taken when packets match the rule.
Block - Packets matching the rule will be dropped
immediately
Pass - Packets matching the rule will be passed immediately.
Block_If_No_Further_Match - A packet matching the rule,
and that does not match further rules, will be dropped.
Pass_If_No_Further_Match - A packet matching the rule,
and that does not match further rules, will be passed through.
Click Enable to make the history of firewall actions
appearing on the System Maintenance >> Syslog/Mail
Alert >> Syslog File.
107