These Generic Filter are use to completely stealth the WAN interface from internet 

for TCP and ICMP request. 

 

1 Y Gen Off=34,     Len=2, Mask=ffff, Value=0014 Y N N
2 Y Gen Off=42,     Len=4, Mask=ffffffff, Value=00000000 N F N
3 Y Gen Off=23,     Len=1, Mask=ff, Value=01 Y N N
4 Y Gen Off=34,     Len=1, Mask=ff, Value=08 N D N
5 Y Gen Off=0,        Len=6, Mask=ffffffffffff, Value=fffffffffff N F N
6 Y Gen Off=23,     Len=1, Mask=ff, value=06 Y N N  (could be Y D F since there's a bug in display module only)
7 Y Gen Off=42,     Len=4, Mask=ffffffff, Value=00000000 N D F

group 1 to 4 in one set and 5,6,7 in an other set



rule 1 and 2 : Permit FTP Download
rule 3 and 4 : Cut all ICMP request from WAN Only
rule 6 and 7 : Drop UNWANTED/NOT REQUESTED TCP Connection.