Re: IP Filter Order

anonymous_at_discussions.microsoft.com
Date: 03/24/04 

Date: Tue, 23 Mar 2004 23:16:42 -0800

>-----Original Message-----
>Ipsec filters are applied in a manner so that specific
rules override a general
>rule. In other words a permit port 80 tcp would override
a general block all
>rule and allow traffic on port 80 tcp. --- Steve
Yes, but there also is specific rule
MyIPAddress:1:TCP:BLOCK

Question is which rule from those two specific are MORE
specific.
>
>
>"Somo" <hicode@inbox.lv> wrote in message
>news:f0c101c410e0$463d2eb0$a601280a@phx.gbl...
>> For example I have IP Filters:
>>
>> SOURCE -direction- DESTINATION Protocol Action
>> Any <-> MyIPAddress Any Block
>> Any:80 <-> MyIPAddress:Any TCP Permit
>> Any:Any <-> MyIPAddress:1 TCP Block
>>
>> Is it possible to scan MyIPAddress:1 from source port
80?
>>
>> Scan packets will be:
>> Any:80 -> MyIPAddress:1 TCP
>>
>> so, in what order IP Filters would be applied?
>>
>
>
>.
>