Chapter 5 Using the Command-Line Interface 73
The secondary specifiers are optional. The following table lists the possible
tags and their allowed values:
The following table lists the possible action tags and their allowed values:
Examples
The following rule tells the appliance to deny FTP document requests to the
IP address 112.12.12.12.
Secondary Specifier Allowed Value
time A time range, such as 08:00-14:00
src_ip The IP address of the client
prefix A prefix in the path part of a URL
suffix A file suffix in the URL
port A requested URL port
method A request URL method; one of the following:
get
post
put
trace
scheme A request URL protocol; one of the following:
HTTP
FTP
Action Value
action ip_allow
ip_deny
keep_hdr Enter the client request header information that
you want to keep:
date
host
cookie
client_ip
strip_hdr Enter the client request header information that
you want to strip. You have the same options as
keep_hdr.
dest_ip=112.12.12.12 scheme=ftp action=ip_deny