Efficient Networks 107-0001-000 manual Firewall deny protocol application parameters

Efficient Networks® Router family	Chapter 18: Stateful Firewall Commands
Command Line Interface Guide

Example

Example command deletes all firewall rules from the allow rules list.

-> firewall delete all allow

Response

Command prompt.

firewall deny

Creates a firewall rule that will be added to the firewall deny rules list. To view the current deny firewall rules, use the firewall list command.

NOTE:

If NAT is enabled on the router, then the outgoing firewall rules should be specified in terms of the private addresses. However, for inbound rules, the rules would need to use the router’s WAN address.

Mgmt Class

Security (R/W)

Input Format

firewall deny <protocol application> [<parameters>]

Parameters

The following parameters specify the <protocol> (-p) or <application> (-a) characteristics that a packet must have in order to match the firewall rule:

-p tcp udp icmp <protocol number>a

The packet must have the specified protocol.

-a imap telnet bootp nntp rpc tftp smtp dns ftp rexec rsh rlogin syslog winframe rdp http htps ntp smb ras realaudio netmeeting aolim quicktime cuseme netshow pptp nfs nis traceroute sqlnet ipsec

Packets must match the assigned application characteristics.

aInteger, numerical protocol ID.

Efficient Networks® Page 18-9