Silicon Graphics Gauntlet, Administrator'S Manual

Page: 278 / 306

252
Appendix B: Netperm Table
Example
This example indicates that the sales group is permitted to TELNET to any destination
between the hours of 8:00 am and 5:00 pm:
authsrv: permit-operation group sales tn-gw * time 08:00 17:00
ourname
• http-gw
Specifies the host and domain name that the HTTP proxy uses when creating the URLs
(links). Because the firewall may have different host names, this allows you to specify
which host name to use.
service Specifies the name of a service for which this rule applies. Valid values are:
ftp-gw—FTP proxy
rlogin-gw—Rlogin proxy
rsh-gw—Rsh proxy
tn-gw—TELNET proxy
*—all of these proxies
destination Specifies the hosts to which the proxies can or cannot send requests. Specify
individual machines, entire networks, or subnets. Use IP addresses or host names.
The wildcard * is valid.
options Specifies particular operations for each protocol that can be controlled. Valid
values are: ftp-gw (consult the ftpd(1) reference manual page), rlogin-gw, rsh-gw,
tn-gw.
time Indicates that this rule goes into effect and stops having an effect at a particular
time.
start Specifies the time at which the proxy begins using this rule. Specify time in hours
and minutes (between 00:00 and 23:59).
end Specifies the time at which the proxy stops using this rule. Specify time in hours
and minutes (between 00:00 and 23:59).