C613-50186-01 Rev B
Command Reference for AR2050V
2604
AlliedWare Plus™ Operating System - Version 5.4.7-1.x
F
IREWALL
C
OMMANDS
RULE
(F
IREWALL
)
rule (Firewall)
Overview
Use this command to create a rule for the firewall. Firewall security policy is
specified in the form of firewall rules. Each rule defines the appropriate processing
of a type of traffic passing through the firewall.
Use the
no
variant of this command to remove a rule.
Syntax
rule [
<1-65535>
] {permit|deny|reject|log}
<application-name>
from
<source-entity>
to
<destination-entity>
[no-state-enforcement] [log]
no rule {<
1-65535
>|all}
Parameter
Description
<
1-65535
>
Rule ID is an integer in the range <1-65535>. If
you don’t designate a rule ID, a rule ID will be
automatically generated and it will be greater
than the current highest rule ID.
permit
Permit connections that match the
application, source entity and destination
entity specified with this command.
deny
Drop connections that match the application,
source entity and destination entity specified
with this command. No error message is sent
back to the source host.
reject
Reject connections that match the application,
source entity and destination entity specified
with this command. An error message (for
instance, a TCP reset for a rejected TCP
connection, or a destination unreachable
message for an ICMP connection, etc.) is sent
back to the source host.
log
When ‘log’ is the action for the rule, log an
event each time the rule is hit. The traffic will
also be processed by subsequent firewall rules
which may permit, deny or reject the
connection.
<application-name>
Application name. You can either specify an
application name or use the word
any
, which
stands for all applications. For more
information about applications, see
Application and Entity Commands.
<source-entity>
Source entity name. An entity represents a
logical grouping of subnets, hosts or
interfaces. For more information about
entities, see Application and Entity
Commands.
<destination-entity>
Destination entity name.