Re: IP Filter Order

From: Steven Umbach (n9rou_at_n0spam-comcast.net)
Date: 03/24/04


Date: Wed, 24 Mar 2004 01:25:30 GMT

Ipsec filters are applied in a manner so that specific rules override a general
rule. In other words a permit port 80 tcp would override a general block all
rule and allow traffic on port 80 tcp. --- Steve

"Somo" <hicode@inbox.lv> wrote in message
news:f0c101c410e0$463d2eb0$a601280a@phx.gbl...
> For example I have IP Filters:
>
> SOURCE -direction- DESTINATION Protocol Action
> Any <-> MyIPAddress Any Block
> Any:80 <-> MyIPAddress:Any TCP Permit
> Any:Any <-> MyIPAddress:1 TCP Block
>
> Is it possible to scan MyIPAddress:1 from source port 80?
>
> Scan packets will be:
> Any:80 -> MyIPAddress:1 TCP
>
> so, in what order IP Filters would be applied?
>



Relevant Pages

  • Re: IP Filter Order
    ... >Ipsec filters are applied in a manner so that specific ... rules override a general ... In other words a permit port 80 tcp would override ...
    (microsoft.public.win2000.security)
  • Re: IPSec on multihomed Exchange Server
    ... Email works fine as long as I leave the server totally naked of all ... by installing IPSec filters. ... Me to 192.168.22.* and 192.168.23.* for any port. ... let's use tcp 25 and exclude pop/imap issues. ...
    (microsoft.public.security)