Westermo RedFox Series User Manual
Page 725
Westermo OS Management Guide
Version 4.17.0-0
Continued from previous page
Out Interface
The rule will be applied to traffic exiting on this interface.
If neither Out Interface nor Destination Address (see be-
low) are specified, the rule will apply to the INPUT chain,
i.e., traffic destined to the switch itself (ICMP pings, SSH
management, etc.).
Protocol
The rule will be applied to traffic using this protocol. Se-
lect IP protocol in drop-down or enter the protocol number
to specify for which protocol to apply this rule (see also
Destination Port option below). Select any to allow traffic
from any IP Protocol (ICMP, TCP, UDP, . . . ) through.
Source
Address(es)
The rule will be applied to traffic originating from a source
with this specific IP-address or an IP-address in the speci-
fied subnet. Select Single and enter the single source ad-
dress into the address field. Select Subnet and enter an
address into the address field and a subnet mask into the
Netmask field.
Destination
Address(es)
The rule will be applied to traffic destined to this specific
IP-address or to an IP-address in the specified subnet. Se-
lect Single and enter the single source address into the
address field. Select Subnet and enter an address into the
address field and a subnet mask into the Netmask field.
If neither Out Interface (see above) nor Destination Ad-
dress are specified, the rule will apply to the INPUT chain,
i.e., traffic destined to the switch itself (ICMP pings, SSH
management, etc.).
Destination Port
The rule will be applied to traffic destined to this set of
(UDP/TCP) ports. If JavaScript is enabled, the range start
may be selected in the drop down. Only valid if Protocol
TCP or UDP has been selected (see above).
Log
Controls if a match on this rule should be logged in the
kernel log file. Nothing will be logged unless logging is
also enabled under the common firewall settings. Note:
Logging differs in behavior between policy Accept and
Deny. See
for more details.
➞ 2015 Westermo Teleindustri AB
725