Filtering Rules

To add or edit a rule

1.In the packet filter rule set creation or modification window, click Create or Edit.This opens a rule creation or rule modification window.

Dr.Web Firewall packet rules

For details on a certain option, click the corresponding item in the picture.

 

2.Configure the following parameters:

Parameter

Description

Rule name

The name of the created/edited rule.

Description

The rule description.

Action

The action for Firewall to perform when the packet is intercepted:

Block packets

Allow packets

Direction

The direction of the connection:

Inbound – the rule is applied when the packet is received from the network.

Outbound – the rule is applied when the packet is sent into the network from your computer.

Any – apply the rule regardless of packet transfer direction.

Logging

The logging mode for the rule. This parameter defines which information is stored in the log:

Entire packet – log the whole packet.

Headers only – log the packet header only.

Disabled – no information is logged.

Criterion

Filtering criterion. For example, transport or network protocol. To add a filtering criterion, select it from the list and click Add. You can add any number of filtering criteria. For certain headers there are additional criteria available.

3.When you finish adjusting the settings, click OK to save changes or Cancel to reject them.

 

Note

If you do not add any criterion, the rule will allow or block all packets depending on the setting specified in the Action field.

 

 
For example,adding a packet filter rule that allows all packets from a subnetwork, may look as follows:

Dr.Web Firewall packet rules

For details on a certain option, click the corresponding item in the picture.

If you select Any for the Local IP address and Remote IP address fields, the rule is applied for any packet which contains an IPv4 header and was sent from a physical address of the local computer.