Apple oxs manual IPFilter Rules Array, Firewall serveradmin Commands

IPFilter Rules Array

An array of the following settings is included in the IPFilter settings for each defined firewall rule. In an actual list of settings, <rule> is replaced with a rule number. You can add a rule by using serveradmin to create such an array in the firewall settings (see “Adding Rules Using serveradmin” on page 140).

Parameter (ipfilter:)	Description
rules:_array_id:<rule>:	The source of traffic governed by the rule.
source
rules:_array_id:<rule>:	The protocol for traffic governed by the rule.
protocol
rules:_array_id:<rule>:	The destination of traffic governed by the rule.
destination
rules:_array_id:<rule>:	The action to be taken.
action
rules:_array_id:<rule>:	Whether the rule is enabled.
enabled
rules:_array_id:<rule>:	Whether activation of the rule is logged.
log
rules:_array_id:<rule>:	Whether read-only is set.
readOnly
rules:_array_id:<rule>:	The source port of traffic governed by the rule.
source-port

Firewall serveradmin Commands

You can use the following commands with the serveradmin application to manage Firewall (ipfilter) service.

Command
(ipfilter:command=)	Description
getLogPaths	Find the current location of the log used by the service.
	Default = /var/log/system.log
getStandardServices	Retrieve a list of the standard services as they appear on the
	General pane of the Firewall service settings in the Server Admin
	GUI application.
writeSettings	Equivalent to the standard serveradmin settings command,
	but also returns a setting indicating whether the service needs to
	be restarted. See “Determining Whether a Service Needs to be
	Restarted” on page 19.

Chapter 13 Working With Network Services

141