Apple Mac OS X Server manual Ipfilter Rules Array, Firewall serveradmin Commands

ipfilter:rules:_array_id:1111:readOnly = yes

ipfilter:rules:_array_id:1111:source-port = ""

Control-D

ipfilter Rules Array

An array of the following settings is included in the ipfilter settings for each defined firewall rule. In an actual list of settings, <rule> is replaced with a rule number. You can add a rule by using serveradmin to create such an array in the firewall settings (see “Adding Rules Using serveradmin” on page 232).

Parameter (ipfilter:)	Description
rules:_array_id:<rule>:	The source of traffic governed by the rule.
source
rules:_array_id:<rule>:	The protocol for traffic governed by the rule.
protocol
rules:_array_id:<rule>:	The destination of traffic governed by the rule.
destination
rules:_array_id:<rule>:	The action to be taken.
action
rules:_array_id:<rule>:	Whether the rule is enabled.
enabled
rules:_array_id:<rule>:	Whether activation of the rule is logged.
log
rules:_array_id:<rule>:	Whether read-only is set.
readOnly
rules:_array_id:<rule>:	The source port of traffic governed by the rule.
source-port

Firewall serveradmin Commands

You can use the following commands with the serveradmin tool to manage the firewall service.

Command

(ipfilter:command=)	Description
getLogPaths	Find the current location of the log used by the service.
	Default = /var/log/system.log
getStandardServices	Retrieve a list of the standard services as they appear on the
	General pane of the Firewall service settings in the Server Admin
	application.
writeSettings	Equivalent to the standard serveradmin settings command,
	but also returns a setting indicating whether the service needs to
	be restarted. See “Using the serveradmin Tool” on page 48.

Chapter 14 Working with Network Services

233