ZyXEL Communications 10 - Manual (Page 252)

ZyWALL 10~100 Series Internet Security Gateway
19-10 Filter Configuration
Packet
into IP Filter
Matched
Matched
Yes
Action Matched
Action Not Matched
More?
No
Filter Active?
Check
IP Protocol
Drop
Drop Packet Accept Packet
Drop Forward Check Next Rule
Check Next Rule
Check Next Rule
Forward
Not Matched
Yes
No
Check Src
IP Addr
Apply SrcAddrMask
to Src Addr
Matched
Check Dest
IP Addr
Apply DestAddrMask
to Dest Addr
Not Matched
Not Matched
Check Src &
Dest Port
Matched
Not Matched
Figure 19-7 Executing an IP Filter