PDF user manual for CopperEdge 150

5. Destination port comparison.For TCP and UDP packets only, compares thedestination TCP/UDP port of the packet with the portof the filter. The comparison standard can specify amatch if the value of the packet’s destination port is:ANY anythingLT less than the filter portGT greater than the filter portEQ equal to the filter portNE not equal to the filter port.1 2 7 (In specifying Source or Destination Port Comparisons, please beaware that the options “Any” and “NE” are homophones of eachother. Always check for understanding to be sure that any oralinstruction to configure this option as “Any” is not misinterpreted as“NE,” or vice versa.The pass and block actions are self-explanatory; the chain action,described below, is used to invoke multiple filtering criteriafor the same packet, for example to specify a range of values.&KDLQLQJ)LOWHUVThe Chain action combines two or more sequential filters in alist. Only when a packet matches all filters in the chain will theaction in the last filter in the chain be taken. Thus, to blockpackets with source ports between 120 and 130, you wouldcombine two filters:Match source_port > 119, action: CHAINMatch source_port < 131, action: BLOCK6SHFLI\LQJ)LOWHUVRemember, the first filter that matches the packet determineswhich action will be taken. So not only the selection criteria,but the order of their presentation is crucial to an effective filteringscheme.To specify a complete packet filter, issue a Set command thatincludes all of the configurable objects in the cmFilter group,including the instance with its two index objects. For example:*Index*FilterNumberFunction= PII for this filter= Filter Number for this filter= Sets status of the current filter orfilter list&KDSWHU$GYDQFHG&RQILJXUDWLRQ