Chapter 27 - filter configuration, Chapter 27 filter configuration, 1 introduction to filters – ZyXEL Communications Parental Control Gateway HS100/HS100W User Manual
Page 264: 1 the filter structure of the homesafe

HomeSafe User’s Guide
Filter Configuration
27-1
Chapter 27
Filter Configuration
This chapter shows you how to create and apply filters.
27.1 Introduction to Filters
Your HomeSafe uses filters to decide whether to allow passage of a data packet and/or to make a
call. There are two types of filter applications: data filtering and call filtering. Filters are
subdivided into device and protocol filters, which are discussed later.
Data filtering screens the data to determine if the packet should be allowed to pass. Data filters
are divided into incoming and outgoing filters, depending on the direction of the packet relative to
a port. Data filtering can be applied on either the WAN side or the LAN side. Call filtering is
used to determine if a packet should be allowed to trigger a call. Remote node call filtering is
only applicable when using PPPoE encapsulation. Outgoing packets must undergo data filtering
before they encounter call filtering as shown in the following figure.
Figure 27-1 Outgoing Packet Filtering Process
For incoming packets, your HomeSafe applies data filters only. Packets are processed depending
upon whether a match is found. The following sections describe how to configure filter sets.
27.1.1 The Filter Structure of the HomeSafe
A filter set consists of one or more filter rules. Usually, you would group related rules, e.g., all the
rules for NetBIOS, into a single set and give it a descriptive name. The HomeSafe allows you to
configure up to twelve filter sets with six rules in each set, for a total of 72 filter rules in the
system. You cannot mix device filter rules and protocol filter rules within the same set. You can
Data
Filtering
Outgoing
Packet
Drop
packet
Built-in
default
Call Filters
User-defined
Call Filters
(if applicable)
Initiate call
if line not up
Active Data
Send packet
and reset
Idle Timer
Or
Or
Drop packet
if line not up
Drop packet
if line not up
Send packet
but do not reset
Idle Timer
Send packet
but do not reset
Idle Timer
Match
Match
Match
No
match
No
match
No
match
Call Filtering