D-Link NetDefendOS, User Manual

Page: 166 / 912

• ftp-passthrough (Service and ALG removed)
If a pre-11.01 configuration is upgraded to 11.01 or later, these predefined objects will continue
to exist as before and can be used just as before so there will be no change.
In a new NetDefendOS 11.01 or later, these removed services and ALGs can be recreated as
custom services and ALGs if desired but a better option is to use an
IP Policy object instead of an
IP Rule . For example, the predefined http service can be used with an IP policy and all of the
settings that were previously available through the ALG are now available directly on the policy.
In a new installation of 11.01 or later, any of the following Service objects can be used directly
with an IP Policy object in this way, removing the need to use a separate ALG:
• http
• https
• smtp
• imap
• pop3
• ftp
• tftp
With all of the above services, the settings of their corresponding ALG will become available on
an
IP Policy object they are associated with.
In the case of an upgrade from a NetDefendOS version prior to 11.01, the administrator can
create these new versions of services by simply setting the
Protocol property of the Service object
to the correct value. The service can then then be used with an IP policy as though it was a new
installation of NetDefendOS.
This topic is is also discussed in Section 6.2, “ALGs” .
Example 3.14. Listing the Available Services
To example shows how to produce a listing of all currently available services in NetDefendOS:
Command-Line Interface
gw-world:/> show Service
The output will look similar to the following listing with the services grouped by type with the
service groups appearing first:
ServiceGroup
Name Comments
------------ --------------------------------------------------
all_services All ICMP, TCP and UDP services
all_tcpudp All TCP and UDP services
ipsec-suite The IPsec+IKE suite
l2tp-ipsec L2TP using IPsec for encryption and authentication
l2tp-raw L2TP control and transport, unencrypted
pptp-suite PPTP control and transport
ServiceICMP
Name Comments
------------ --------------------------------------------------
all_icmp All ICMP services
"
"
Chapter 3: Fundamentals
166