Silicon Graphics Gauntlet, Administrator'S Manual

Page: 241 / 306

215
Appendix B
B. Netperm Table
The network permissions table (/usr/gauntlet/config/netperm-table) contains configuration
information for the Gauntlet Internet Firewall. The kernel, proxies and other applications
read their configuration information from this table. The rules in the table include two
types of information: policy rules and application-specific rules.
Note:
This structure differs from previous versions of the netperm-table file. The proxies
and other applications still recognize netperm-table files from version 2.0 and higher. You
may wish to convert your netperm-table file to the new format soon for two reasons. First,
the new policy-based table is much easier to use because you can use generic rules.
Second, future versions of the proxies and applications will not always support the older
table format. Remember to make a backup copy of your working netperm-table file before
you attempt any conversions.
Note:
Gauntlet uses /usr/gauntlet/config/template.netperm-table to create (thus overwriting)
/usr/gauntlet/config/netperm-table. Any modifications you wish to be permanent must be
made to the template.netperm-table file.
Policy Rules
Policies are collections of general configuration information. These allow you to closely
map your security policy to policies for the Gauntlet Firewall. Gauntlet configuration
policies often include information such as
• types of proxies that the firewall can start
• permitted (or denied) destinations for requests
• authentication requirements
The source address of the request is the basis for a policy. You define policies for a set of
hosts, rather than defining rules on a proxy-by-proxy basis as in previous versions. You
can easily use the same set of rules for a group of hosts by creating a generic policy