77 lines
5.7 KiB
HTML
77 lines
5.7 KiB
HTML
|
<?xml version="1.0" encoding="UTF-8"?>
|
||
|
|
<!DOCTYPE html
|
||
|
|
PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
|
||
|
|
<html lang="en-us" xml:lang="en-us">
|
||
|
|
<head>
|
||
|
|
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
|
||
|
|
<meta name="security" content="public" />
|
||
|
|
<meta name="Robots" content="index,follow" />
|
||
|
|
<meta http-equiv="PICS-Label" content='(PICS-1.1 "http://www.icra.org/ratingsv02.html" l gen true r (cz 1 lz 1 nz 1 oz 1 vz 1) "http://www.rsac.org/ratingsv01.html" l gen true r (n 0 s 0 v 0 l 0) "http://www.classify.org/safesurf/" l gen true r (SS~~000 1))' />
|
||
|
|
<meta name="DC.Type" content="topic" />
|
||
|
|
<meta name="DC.Title" content="IP filtering and network address translation" />
|
||
|
|
<meta name="abstract" content="IP filtering and network address translation (NAT) act like a firewall to protect your internal network from intruders." />
|
||
|
|
<meta name="description" content="IP filtering and network address translation (NAT) act like a firewall to protect your internal network from intruders." />
|
||
|
|
<meta name="DC.Relation" scheme="URI" content="rzajbrzajbpt.htm" />
|
||
|
|
<meta name="DC.Relation" scheme="URI" content="rzajbrzajb0awhyip.htm" />
|
||
|
|
<meta name="DC.Relation" scheme="URI" content="rzajbrzajb1whatis.htm" />
|
||
|
|
<meta name="DC.Relation" scheme="URI" content="rzajbrzajb7planningsd.htm" />
|
||
|
|
<meta name="DC.Relation" scheme="URI" content="rzajbrzajbx1creatingnewrulessd.htm" />
|
||
|
|
<meta name="DC.Relation" scheme="URI" content="rzajbrzajbx2managingrulessd.htm" />
|
||
|
|
<meta name="DC.Relation" scheme="URI" content="rzajbrzajbttrouble.htm" />
|
||
|
|
<meta name="DC.Relation" scheme="URI" content="rzajbrelatedinfo.htm" />
|
||
|
|
<meta name="copyright" content="(C) Copyright IBM Corporation 2000, 2006" />
|
||
|
|
<meta name="DC.Rights.Owner" content="(C) Copyright IBM Corporation 2000, 2006" />
|
||
|
|
<meta name="DC.Format" content="XHTML" />
|
||
|
|
<meta name="DC.Identifier" content="rzajb0-ip_packet_security_sd" />
|
||
|
|
<meta name="DC.Language" content="en-us" />
|
||
|
|
<!-- All rights reserved. Licensed Materials Property of IBM -->
|
||
|
|
<!-- US Government Users Restricted Rights -->
|
||
|
|
<!-- Use, duplication or disclosure restricted by -->
|
||
|
|
<!-- GSA ADP Schedule Contract with IBM Corp. -->
|
||
|
|
<link rel="stylesheet" type="text/css" href="./ibmdita.css" />
|
||
|
|
<link rel="stylesheet" type="text/css" href="./ic.css" />
|
||
|
|
<title>IP filtering and network address translation</title>
|
||
|
|
</head>
|
||
|
|
<body id="rzajb0-ip_packet_security_sd"><a name="rzajb0-ip_packet_security_sd"><!-- --></a>
|
||
|
|
<!-- Java sync-link --><script language="Javascript" src="../rzahg/synch.js" type="text/javascript"></script>
|
||
|
|
<h1 class="topictitle1">IP filtering and network address translation</h1>
|
||
|
|
<div><p>IP filtering and network address translation (NAT) act like a firewall
|
||
|
|
to protect your internal network from intruders.</p>
|
||
|
|
<p>IP filtering lets you control what IP traffic to be allowed into and out
|
||
|
|
of your network. Basically, it protects your network by filtering packets
|
||
|
|
according to rules that you define. NAT, alternatively, allows you to hide
|
||
|
|
your unregistered private IP addresses behind a set of registered IP addresses.
|
||
|
|
This helps to protect your internal network from outside networks. NAT also
|
||
|
|
helps to alleviate the IP address depletion problem, because many private
|
||
|
|
addresses can be represented by a small set of registered addresses.</p>
|
||
|
|
<div class="note"><span class="notetitle">Note:</span> <strong>Packet rules</strong> is the combination of IP filtering and NAT. When
|
||
|
|
you see the term, packet rules, used in this topic, it means that the subject
|
||
|
|
applies to both of those components.</div>
|
||
|
|
<p>In addition to the information contained in this topic, use the online
|
||
|
|
help available from the Packet Rules Editor in iSeries™ Navigator. The iSeries Navigator
|
||
|
|
online help offers tips and techniques for making the most of packet rules,
|
||
|
|
including <strong>How do I</strong> help, <strong>Tell me about</strong> help, and extensive context-sensitive
|
||
|
|
help. </p>
|
||
|
|
</div>
|
||
|
|
<div>
|
||
|
|
<ul class="ullinks">
|
||
|
|
<li class="ulchildlink"><strong><a href="rzajbrzajbpt.htm">Printable PDF</a></strong><br />
|
||
|
|
Use this to view and print a PDF of this information.</li>
|
||
|
|
<li class="ulchildlink"><strong><a href="rzajbrzajb0awhyip.htm">Scenarios: Packet rules</a></strong><br />
|
||
|
|
Use these scenarios to learn how you can use network address translation (NAT) and IP filtering to protect your network.</li>
|
||
|
|
<li class="ulchildlink"><strong><a href="rzajbrzajb1whatis.htm">Packet rules concepts</a></strong><br />
|
||
|
|
Packet rules comprise both network address translation (NAT) rules and IP filtering rules. These two functions run at the IP layer of the TCP/IP stack and help protect your system against potential risks that are commonly associated with TCP/IP traffic.</li>
|
||
|
|
<li class="ulchildlink"><strong><a href="rzajbrzajb7planningsd.htm">Plan for packet rules</a></strong><br />
|
||
|
|
Before you connect any of your network resources to the Internet, develop a security plan and understand the potential security risks involved.</li>
|
||
|
|
<li class="ulchildlink"><strong><a href="rzajbrzajbx1creatingnewrulessd.htm">Configure packet rules</a></strong><br />
|
||
|
|
Read the checklist that contains an overview of the tasks you must complete to ensure that your rules work properly when activated.</li>
|
||
|
|
<li class="ulchildlink"><strong><a href="rzajbrzajbx2managingrulessd.htm">Manage packet rules</a></strong><br />
|
||
|
|
To maintain the security of your system and the integrity of your packet rules, periodically perform the management tasks.</li>
|
||
|
|
<li class="ulchildlink"><strong><a href="rzajbrzajbttrouble.htm">Troubleshoot packet rules</a></strong><br />
|
||
|
|
This topic provides troubleshooting advice for some common packet rules problems.</li>
|
||
|
|
<li class="ulchildlink"><strong><a href="rzajbrelatedinfo.htm">Related information for packet rules</a></strong><br />
|
||
|
|
</li>
|
||
|
|
</ul>
|
||
|
|
</div>
|
||
|
|
</body>
|
||
|
|
</html>
|