User Manual

Filtered content: bytes
Reference: Configuration options
With a mouse click on the link a dialog box appears in which you can select a file that
contains the specific buffer.
Filtered content: mask
With a mouse click on the link a dialog box appears in which you can select the
specific mask.
Filtered content: offset
With a mouse click on the link a dialog box appears in which you can define the filtered
content offset. The offset is computed from where TCP header ends.
Predefined rules for the UDP data traffic monitor
Setting Rules
Low -
Medium UDP accepted traffic monitor
Allow UDP packets from address 0.0.0.0 with mask 0.0.0.0 if local port is in
{0- 66535} and remote port is in {0-66535}.
Apply rule to open ports for all streams.
Don't log when packet matches rule.
Advanced: Discard packets that have following bytes with mask
at offset 0.
Discard UDP traffic
Deny UDP packets from address 0.0.0.0 with mask 0.0.0.0 if local port is in
{0-65535} and the remote port is in {0-65535}.
Apply rule for all ports for all streams.
Don't log when packet matches rule.
Advanced: Select packets that have following bytes with mask
at offset 0.
High Monitor established UDP traffic
Allow UDP packets from address 0.0.0.0 with mask 0.0.0.0 if the local port
is in {0-65535} and the remote port is in {53, 67, 68, 123}. Apply rule to
open ports for all streams.
Don't log when packet matches rule.
Advanced: Discard packets that have following bytes with mask
at offset 0.
Allow/ Deny UDP packets
With a mouse click on the link you have the choice to allow or deny special defined
incoming UDP packets.
Avira Professional Security - User Manual (Status: 30 Mar. 2012) 131