ZyXEL Communications ZYWALL10 - Manual (Page 109)

ZyWALL 10 Internet Security Gateway
7-10 Filters
The following figure illustrates the logic flow of an IP filter.
Packet
into IP Filter
Matched
Matched
Yes
Action Matched
Action Not Matched
More?
No
Filter Active?
Check
IP Protocol
Drop
Drop Packet Accept Packet
Drop Forward Check Next Rule
Check Next Rule
Check Next Rule
Forward
Not Matched
Yes
No
Check Src
IP Addr
Apply SrcAddrMask
to Src Addr
Matched
Check Dest
IP Addr
Apply DestAddrMask
to Dest Addr
Not Matched
Not Matched
Check Src &
Dest Port
Matched
Not Matched
Figure 7-10 Executing an IP Filter