Firewall
Packet filtering
IX20 User Guide
554
3. (Optional) Set the label for the rule.
(config firewall filter 1)> label "My filter rule"
(config firewall filter 1)>
4. Set the action to be performed by the filter rule.
(config firewall filter 1)> action
value
(config firewall filter 1)>
where
value
is one of:
n
accept
: Allows matching network connections.
n
reject
: Blocks matching network connections, and sends an ICMP error if appropriate.
n
drop
: Blocks matching network connections, and does not send a reply.
5. Set the firewall zone that will be monitored by this rule for incoming connections from network
interfaces that are a member of this zone:
See
for more information about firewall zones.
(config firewall filter 1)> src_zone my_zone
(config firewall filter 1)>
6. Set the destination firewall zone. Packets destined for network interfaces that are members
of this zone will either be accepted, rejected or dropped by this rule.
See
for more information about firewall zones.
(config firewall filter 1)> dst_zone my_zone
(config firewall filter 1)>
7. Set the IP version.
(config firewall filter 1)> ip_version
value
(config firewall filter 1)>
where
value
is one of:
n
any
n
ipv4
n
ipv6
n
The default is
any
.
8. Set the protocol.
(config firewall filter 1)> protocol
value
(config firewall filter 1)>
where value is one of:
n
any
n
icmp
n
icmpv6
