User Manual

Reference: Configuration options
High Monitor established TCP traffic
Allow TCP packets from address 0.0.0.0 with mask 0.0.0.0 if local port is in
{0-65535} and remote port is in {0-65535}.
Apply for packets of existing connections.
Don't log when packet matches rule.
Advanced: Select packets that have following bytes with mask
at offset 0.
Allow/ Deny TCP packets
With a mouse click on the link you have the choice to allow or deny special defined
incoming TCP packets.
IP address
By clicking on this link with the mouse, a dialog box opens in which you can enter the
required IPv4 or IPv6 address.
IP mask
By clicking on this link with the mouse, a dialog box opens in which you can enter the
required IPv4 or IPv6 mask.
Local ports
With a mouse click on this link a dialog box appears in which you can define the local
port number(s) or complete port ranges.
Remote ports
With a mouse click on this link a dialog box appears in which you can define the
remote port number(s) or complete port ranges.
Application method
With a mouse click on this link you have the choice to apply the rule for "connection
initiation and existing connection packets" or only for "packets of existing
connections" or for "all packets".
Event database
By clicking on the link with the mouse you can choose between "Log" and "Don't log"
to the event database, if the packet complies with the rule.
Advanced
The advanced feature enables content filtering. For example packets can be rejected
if they contain some specific data at a certain offset. If you do not want to use this
option, do not select a file or choose an empty file.
Avira Professional Security - User Manual (Status: 30 Mar. 2012) 130