Setting Command-Line Options | HP UX Internet Express Software

Figure 48 Configure FireScreen Menu

Use the Configure FireScreen menu to perform the following tasks:

•Set command-line options (Section : Setting Command-Line Options)

•Set the screening mode (Section : Setting the Screening Mode)

•Add a screening rule (Section : Adding a Screening Rule)

•Check the syntax of screening rules (Section : Checking Syntax of Screening Rules)

•Delete a screening rule (Section : Deleting a Screening Rule)

Note:

You must restart FireScreen for configuration file changes to take effect (Section : Starting and Stopping FireScreen).

Setting Command-Line Options

To set the command-line options for FireScreen, follow these steps:

1.From the Configure FireScreen menu, choose Set Options.

The current command-line options are displayed, as shown in Figure 49. These command-line options are passed to FireScreen when it is started.

Figure 49 Default Command-Line Options for FireScreen

The default command-line options specify that:

•The /etc/firescreen.conf file is used to store screening rules and other configuration information. (This corresponds to the -foption.)

176 Network Security Administration

Image 176

HP UX Internet Express Software manual Setting Command-Line Options, Configure FireScreen Menu

Contents

Internet Express for Tru64 Unix Version AbstractPage Contents User Authentication Mail Delivery Administration Mail Access Administration 132 Network Security Administration 167 Web Services Administration 155XML Component Administration 164 Proxy Services Administration 190 Ldap Directory Server Administration 195 Samba File and Print Server Administration 216 OpenSLP Administration 207FTP Server Administration 213 InterNetNews Server Administration 225 Internet Relay Chat Administration 248 PostgreSQL Database and MySQL Administration 249 Bind Domain Name Server Administration 260Jabber 265 Twiki 266 Document Organization About This DocumentIntended Audience Command Typographic ConventionsComputer output User input Reading Documentation Using the Administration Utility Reading Documentation Using the Public Web ServerRelated Information Reading the Documentation Reading Documentation from the Internet Express CD-ROM Reading Reference Pages for Internet Express ComponentsOn a Tru64 Unix System On a PC Readers Comments Reading the Open Source Software Component Documentation# man -M /usr/news/man active.5 Internet electronic mail readerscomment@zk3.dec.com Readers Comments Using the Administration Utility Using the Administration Utility Using the Administration Utility Main Menu Administration Utility Menu Options and Tasks Registering Your Internet Express Installation Navigating the Administration UtilityUsing Administration Utility Forms Register Online Sample Administration Utility Form Accessing Administration Servers Internet Express Accounts and PortsPort Number Description 8081 Internet Express Managing Internet Express in a TruCluster Environment Accessing the Internet Express Login AccountAccessing and Managing the Internet Monitor TruCluster Impact on Internet Express Administration Installing and Removing ComponentsUsing Internet Express Services in a Cluster Installing and Removing Components Keywords for URL LineHostname of the local host Port number from the current Web server Accessing Web-Based System Management Tools Performing Web-Based System Management Tuning Kernel Attribute Values Accessing Web-Based System Management Tools Using the Administration Utility Open Source Software Web Sites Where to Find More InformationInternet Express and AlphaServer Products Web Sites Expect FirefoxFreeRADIUS GnuPG IRC Server JabberLynx Web Browser Majordomo Automated Internet Mailing Lists Manager MySQL OpenLDAPOpenSLP Perl PostgreSQL Relational Database Management System Procmail Mail Filtering LanguagePure-FTP Server Samba File and Print Server System Security Web Sites Other Useful Web Sites ApplicationsInterNIC Microsoft Encompass User Administration Manage Users Menu User Administration Overview of User Accounts Assigning Passwords to User Accounts Purging Obsolete PasswordsSpecifying User Names Overview of User Accounts Searching for User Accounts Searching for User Accounts Assigning Users to Groups Selecting User Accounts Creating Captive Accounts for Named Users Shows the Create Named User Account form Creating Captive Accounts for Generic Users Creating a Named User Account Creating a Noncaptive Account for a Unix System User Creating Generic User Accounts To create a group, see Section Creating Groups Creating a Noncaptive Account for a Unix System User Creating Groups Creating a System User Account Displaying User Account Information Creating Groups Deleting User Accounts Displaying User Account Information Changing Groups for User Accounts Changing Groups for User Accounts User Administration Changing the Password for an Account Changing the Password for an Account Changing Mail Services for Users Changing Mail Services for Users Assigning Regular Delivery Mail ServiceAssigning POP with Password Mail Service Assigning the Cyrus Imap Mail Service Assigning Cyrus Imap with Password Mail Service Assigning Apop with Password Mail Service Managing the iass AccountChanging the iass Account Forwarding Address Managing the .users.list File Managing the User Self-Administration Feature Listing User Accounts and PasswordsPurging Passwords for User Accounts Removing the .users.list File Enabling and Disabling the User Self-Administration Feature Managing the User Self-Administration Feature Manage User Self-Administration Menu Modifying the Web Server Configuration Configure Web Server for Self-Administration Form Enabling and Disabling Login Delays Modify Web Server Configuration Managing User Self-Administration Groups Adding Groups Deleting and Modifying Groups Adding Groups Customizing the User Self-Administration Feature Enabling and Disabling Groups User Administration Managing the Ldap Module for System Authentication User AuthenticationManaging the Ldap Module for System Authentication Example 1 Security Matrix Enabled for Ldap User Authentication Ldap Caching Daemon Example 2 Ldap Caching Daemon Configuration File Creating Branches Value of searchbase Value of machinedn Value of machinepass Extended Ldap Schema for Unix Account Information Userbranch ou=accounts,searchbase Indexing Attributes for the Directory Servers Ldap Database Index Types Configuring the Ldap Module for System AuthenticationAdding Indices for OpenLDAP Defining Ldap System Parameters Modifying the Ldap Module ConfigurationConfiguring the Ldap Module for System Authentication Configuring Ldap Password Attributes Configuring Ldap Group Attributes Enabling and Disabling the Ldap Module Testing the Ldap Module ConfigurationImporting and Exporting Users from /etc/passwd Importing Users into the Directory Server Importing Users from NISExporting Users from the Directory Server Adding an Ldap User in a C2 Environment Access Control Ldap Database Utilities Remove login names from specified group Remove login names from all groupsFile in which to store search results the default is Authentication mechanism Adding a User Entry Checking the Ldap Server ConfigurationExtracting Users from the /etc/passwd File Deleting a User Entry Retrieving a User Entry Ldapsyncuser -b branch filename Synchronizing with a Password FileAdding a Group Entry Maintaining Group Membership Deleting a Group Entry Setting a Users Password in the Ldap Directory Server Retrieving a Group EntryStarting the ldapcd Daemon Ldapgetgroup -b branch -f input-file Maintaining the Ldap Directory Server Using Ldap Commands Stopping the ldapcd DaemonAdding Entries to an Ldap Database Modifying Entries in an Ldap Database Authentication Actions Performed Files Modified by theLDAP Module for System AuthenticationOverview of the Ldap Client Actions Performed by the Ldap Client Operation of login/su Behavior of the the ldapdc DaemonDebugging ldapdc Etc/ldapusers.allow # su user1 Mail Delivery Administration Sendmail Server AdministrationMail Delivery Administration Bogofilter to filter spam Section Bogofilter Spam Filter Configuring the System as a Standalone Mail System Configuring the System as a Mail ClientConfiguring the System as a Mail Server Ldap see Section Configuring Ldap Creating and Deleting Host Aliases for a Mail Server Changing the Sendmail Server Configuration Sendmail Server Administration Configuring Mail Protocols PSInet see Section Configuring the X.25 ProtocolThrough Section Configuring the X.25 Protocol Creating and Deleting Pseudo Domain Aliases Configuring the MTS Protocol Configuring the DECnet Phase IV Protocol Configuring the DECnet/OSI Protocol Configuring the Uucp Protocol Configuring the X.25 Protocol Configuring Masquerading Accessing the Configure Masquerading Form Root Postmaster News Uucp Configuring Your System for Masquerading Mailer-daemon Rdist Nobody Daemon Pop Imap Configuring Virtual Domains Example 4 Sample Virtual Domain Table # makemap btree virtusertable virtusertable Enabling Procmail as a Local Mailer Enabling Anti-Virus Configuring Anti-Spam Configuring Relaying Configuring the Access Database Example 5 Sample Access Database for the Sendmail Server Configuring an Access Database Configuring Ldap Configuring Checking on Senders Information Configuring Mail Filters Milter Shows the Configure Ldap form Socket local/var/run/f1.sock Socket inet1099@remotehost.comSocket inet61066@myhost.com Socket inet1066@myhost.com,T=C5mS10sR10sE5m Sample -p local/var/run/example1.sock Configuring Queues Adding a Queue Deleting a Queue Group # sendmail -bt -q queue-nameModifying a Queue Group General Queue Properties Configuring Queue PerformanceQueue Timers Sendmail Tunable Parameters Configuring Trusted Layer SecuritySendmail Timers Certificate Defaults Certificate Issuer One that issues certificates a CATLS Certificate Values Certicate Authority Abbreviation Certificate Authority Enabling Support Using the Access Database VERIFYbits CIname Sendmail Server Administration Marked as permanentFailure marked as temporary Side Relay or Subject Configuring Mailbox AccessControlling the Sendmail Server Majordomo Mailing List Administration Majordomo Mailing List AdministrationViewing the Sendmail Server Log Creating a Majordomo Mailing List Changing a Majordomo Mailing List Configuration Changing List Owner or Charter Changing Administration Parameters Changing Subscription Parameters Changing Message Content Parameters Changing Command Access Parameters Changing Digest Parameters Changing Moderated List Parameters Changing List Restriction Parameters Mailman Deleting a Majordomo ListChanging Address Processing Parameters Mailman Creating the Initial Mailman List Using a Script Create a Mailing ListDeleting a Mailing List Managing Mailman Mailman Mailing List Administration Menu Bogofilter Spam Filter Mailman ScriptsMailman Log Files Training Bogofilter Using Bogofilter with procmail Filtering with BogofilterFilter Integration with Other Tools Bogofilter/wordlist.db Mail Transport Agent MTA Integration with Bogofilter Mutt Integration with BogofilterPine Integration with Bogofilter Bogofilter Spam Filter Mail Access Administration POP Mail Server AdministrationControlling the POP3 Server Controlling the POP2 Server Viewing the POP Mail Server Log Imap Mail Server AdministrationImap Mail Server Administration Converting Imap Mail Folders Setting Up a Unix User Account for UW ImapSetting Up a Unix User Account for Cyrus Imap Controlling the Cyrus Imap Server Controlling the UW Imap ServerUsr/dt/bin/mailcv -evdt -I -f foldername directoryname user Usr/dt/bin/mailcv -I -t -f ./bar duke Configuring SSL for UW-IMAP Viewing the Imap Server Log IMP Webmail Administration IMP Webmail Administration Accessing the IMP Webmail Administration Menu Enabling and Disabling IMP Webmail Managing Mail Server Settings Enable/Disable IMP Webmail Adding a Mail Server IMP Mail Server SettingsModifying the Mail Server List IMP Mail Server List Settings Deleting a Mail Server Managing Mailbox SettingsModifying a Mail Server Managing Compose Settings IMP Mailbox Settings Preference settings Managing Message SettingsIMP Compose Settings Managing Logging Settings IMP Message Settings IMP Logging Settings Managing Preference Driver Settings Preference Driver Settings Managing Miscellaneous IMP Settings Managing Horde SettingsMiscellaneous IMP Settings Setting Description Allow usage of folders Horde Settings Managing Turba Settings Using IMP Upgrade Tools IMP Turba SettingsSetting Description Enabled Have access to their addressbook Upgrading IMP Configurations Upgrading IMP Databases IMP Database Upgrade Settings New Preference Table Accessing IMP WebmailAdditional Webmail Documentation Secure Web Server Administration Web Services AdministrationSecure Web Server Administration Accessing the Secure Web Servers Internet Express Ports and URLs Changing Configuration Parameters Configuration Files for Secure Web ServersWeb Server Management Server Changing the Password for the Administration Web Server Httpd.conf Srm.conf Access.conf Creating the Search Index Ht//Dig Search Tool AdministrationHt//Dig Search Tool Administration Ht//Dig Indexing and Search Administration Link to Ht//Dig Search Index Updated Ht//Dig Configuration File Message Http//hostname/htdig/search.html Searching the IndexDocumentation Directories and Subsets for XML Components XML Component AdministrationDirectories and Subsets for XML Components Apache Axis Server Administration Apache Cocoon Servlet AdministrationApache Axis Server Administration Managing the Apache Axis Server Viewing the Cocoon Log Files Managing the Apache Cocoon ServletEnabling and Disabling the Cocoon Servlet Network Security Administration TCP Wrapper AdministrationNetwork Services Wrapped by Internet Express Network Services Wrapped by Internet Express Controlling Access to Other Network Services Modifying Access to a Wrapped Network Service Testing TCP Security Modifications Network Service Access Options FireScreen Administration FireScreen Administration Menu Installing FireScreen FireScreen Administration Checking FireScreen Installation Prerequisites Etc/rc.config file FireScreen Administration Install FireScreen Page with Gateway Screening Enabled Configuring FireScreen Setting Command-Line Options Configure FireScreen Menu Set Options Confirmation Setting the Screening Mode Adding a Screening Rule Add New Screening Rule Form Checking Syntax of Screening Rules Deleting a Screening Rule Starting and Stopping FireScreen Starting FireScreen Start/Stop FireScreen Form with Restart Option Enabled Stopping FireScreen Viewing the FireScreen Log Viewing FireScreen StatusViewing FireScreen Screening Rules Usr/internet/docs/snort Snort documentation Snort Intrusion Detection SystemViewing FireScreen Statistics Configuring Snort Decoder Configuring Snort PreprocessorOption Disable Decode Alert Snort -vd -l ./log Viewing Alert Messages FreeRADIUS Server AdministrationRunning Snort Considerations While Installing FreeRADIUS Understanding FreeRADIUS Configuration FilesStarting and Stopping the FreeRADIUS Server Users File Radiusd.conf file Configure --disable-shared make make installClients.conf file Viewing FreeRADIUS Log File Proxy Services Administration Dante Socks Server AdministrationProxy Services Administration Controlling the Dante Socks Server Squid Proxy/Caching Server Administration Configuring the Dante Socks ServerAccessing Dante Socks Information Squid Proxy/Caching Server Administration Managing the Squid Proxy/Caching Server Configuring the Squid Proxy/Caching ServerReinitializing the Disk Cache Displaying Access Statistics Rotating Log Files Controlling the Squid Proxy/Caching Server Understanding the Ldap Directory Schema Ldap Directory Server AdministrationUnderstanding the Ldap Directory Schema Example 6 Ldap Standard Object Class Definition for Person Using the Ldap BrowserLdap Directory Server Administration Installing and Running the Ldap Browser Connecting to an Ldap ServerManaging Frequently Used Connections Creating or Editing Frequently Used Connections Connecting to an Ldap Server using SSL Reconnecting to an Ldap Server Using the Main Browsing WindowDisconnecting from an Ldap Server Controlling Client-Side Schema Checking Opening a New Main WindowClosing a Main Window Viewing a Directory Entry in a Separate Window Adding a New Directory Entry Modifying a Directory EntryDeleting a Directory Entry Copying a Directory Entry Renaming a Directory Entry Moving a Directory EntryAdding Attributes Modifying Attributes Deleting Attributes Managing Directory Entry TemplatesCreating Entry Templates Modifying Entry Templates Searching the Directory Viewing the Object Class SchemaViewing the Attribute Schema Managing and Using the OpenLDAP Directory Server User Configuration FileConfiguring the OpenLDAP Directory Server Managing the OpenLDAP Directory Server Ldap Directory Server Administration OpenSLP Overview OpenSLP AdministrationConfiguration Files and Examples Configuring Optional Security Configuring OpenSLPUsing the OpenSLP Configuration and Registration Files Running the Services Configuring OpenSLP Running the Example Configuration Considerations for Using SLP APIs Documentation Documentation OpenSLP Administration FTP Server Administration Administering Pure-FTP ServerAdministering Pure-FTP Server Creating or Modifying an Anonymous Pure-FTP User Account Enabling or Disabling Anonymous Pure-FTP Access FTP Server AdministrationEnabling or Disabling chroot Upload /data/ftp /pub yes ftp daemon Displaying Active Pure-FTP Users Enabling or Disabling Pure-FTP server Samba File and Print Server Administration Options for Modifying the smb.conf Configuration FileUnderstanding the smb.conf Configuration File Samba File and Print Server Administration Understanding the smb.conf Configuration File Workgroup Add the following value Administering the Samba Server Using the Swat Program Administering the Samba Server Using the Swat ProgramConfiguring the Samba Server Using the Swat Program Samba File and Print Server Administration Configure the Samba Server Menu Manage passwords see Section Administering Passwords Configuring Global VariablesConfiguring Share Parameters Viewing the Current Configuration Administering PasswordsControlling Printers Viewing the Status of the Server Samba File and Print Server Administration InterNetNews Server Administration 225 INN Daemons Specifying INN Configuration DataInterNetNews Server Administration Configuring an External Newsfeed Configuring an External Newsfeed Displaying an External Newsfeed Recommended Spool Space for News ArticlesArticle Retention Period Days 12 GB Adding an External Newsfeed Typically, a newsfeed has the following flags set Removing an External Newsfeed Modifying Newsfeed DefaultsModifying an External Newsfeed Managing Client Access Updating the Local Active File Access Groups Form Fields Displaying Client Access GroupsAdding a Client Access Group Modifying an Existing Client Access Group Removing a Client Access Group Displaying Client Authentication Groups Managing Client Authentication GroupsAdding Client Authentication Groups Client Authentication Groups Menu Fields Modifying Client Authentication Groups Usr/bin/news/auth/passwd Configuring Storage Options Configuring Storage Method EntriesDeleting Client Authentication Groups Configuring Storage Options Modifying a Storage Method Class Options on the Configure Storage MenuAdding a New Storage Method Class Configuring the Cnfs Storage Method Deleting a Storage Method ClassDisplaying Cnfs Entries Adding New Cnfs Entries Modifying Cnfs Entries Managing Article Expiration Displaying Article Expiration DefinitionsDeleting Cnfs Entries Managing Article Expiration Adding an Article Expiration Definition Specific newsgroup for example, rec.photo Managing Article Expiration Modifying an Article Expiration Definition Specifying an Article Expiration Definition Managing Local Newsgroups Deleting an Article Expiration DefinitionModifying the Retention Period for Expired Articles Managing Local Newsgroups Deleting Local Newsgroups Viewing INN Log FilesCreating Local Newsgroups Controlling the INN Server Controlling the INN Server Internet Relay Chat Administration Configuring IRCInternet Relay Chat Administration Controlling the IRC Server PostgreSQL Database and MySQL Administration Installing PostgreSQLInstalling PostgreSQL Starting and Stopping PostgreSQL Server PostgreSQL Database and MySQL Administration Viewing the PostgreSQL Log File Important Files and Directories Administering PostgreSQL AccountsAdministering PostgreSQL Accounts Setting up a Crontab Entry for Vacuuming Databases Using Existing PostgreSQL AccountsRunning the Postmaster Startup Script PostgreSQL Files and Directories Setting up a Crontab Entry for Vacuuming Databases PostgreSQL Database and MySQL Administration Setup Vacuum Crontab Form #/sbin/init.d/postgres start Scaling PostgreSQL#/sbin/init.d/postgres stop Scaling PostgreSQL #/sbin/sysconfig -q ipc#ps -ef grep postmaster Administering MySQL Directories and Files Established by MySQL InstallationStarting and Stopping MySQL MySQL Directories Starting and Stopping the MySQL Server Using a Command Line MySQL Configuration FilesViewing the MySQL Error Log MySQL Log Files Bind Domain Name Server Administration Bind OverviewImportant Bind Files and Directories Bind Files and Directories Bind Binary File Directories Enabling Bind Running the Bind Startup Script Bind DocumentationEnter /sbin/init.d/named start Enter /sbin/rcinet start Running the Bind Startup Script Http//ops.ietf.org/dns/dynupd/secure-ddns-howto.html Controlling the Jabber Server JabberControlling the Jabber Server Twiki TwikiStarting TWiki Stunnel Sample client server configurationSample client server configuration Sendmail Supplemental Information Creating a Certificate of AuthorityBackground OpenSSL Certificate Creation Sample mail filter Section Mail Filter Example Mail Filter Example Mail Filter Example Sendmail Supplemental Information Smfiversion Glossary Glossary FTP 273 See also Https See TCP/IP 275 Index SymbolsIndex 277 Decus see Encompass deinstall.sh scriptWeb site, 30 external newsfeed adding Index 279 Ldap client, 87 Ldap commandsLog file FireScreen viewing, 183 login account Index 281 OpenLDAP Project Web sitePoppassd server controlling Screening mode, 178 screening rule FireScreen TIN 283