NETGEAR ProSafe SRX5308 Cli Reference Manual page 146

ProSafe Gigabit Quad WAN SSL VPN Firewall SRX5308
lan_users {address_wise {ANY | SINGLE_ADDRESS {lan_user_start_ip
dmz_users {ANY | SINGLE_ADDRESS {dmz_user_start_ip <ipaddress>}
log {NEVER | ALWAYS}
Mode security-config [firewall-ipv4-lan-dmz-outbound]
Keyword (might consist of two
separate words)
Service name, action, and schedule
service_name
default_services
service_name
custom_services
action
schedule
<ipaddress>} | ADDRESS_RANGE {lan_user_start_ip <ipaddress>}
{lan_user_end_ip <ipaddress>}} | group_wise <group name>}
| ADDRESS_RANGE {dmz_user_start_ip <ipaddress>}
{dmz_user_end_ip <ipaddress>}}
Associated Keyword to Select or
Parameter to Type
ANY, AIM, BGP, BOOTP_CLIENT,
BOOTP_SERVER, CU-SEEME:UDP,
CU-SEEME:TCP, DNS:UDP, DNS:TCP,
FINGER, FTP, HTTP, HTTPS,
ICMP-TYPE-3, ICMP-TYPE-4,
ICMP-TYPE-5, ICMP-TYPE-6,
ICMP-TYPE-7, ICMP-TYPE-8,
ICMP-TYPE-9, ICMP-TYPE-10,
ICMP-TYPE-11, ICMP-TYPE-13,
ICQ, IMAP2, IMAP3, IRC, NEWS, NFS,
NNTP, PING, POP3, PPTP, RCMD,
REAL-AUDIO, REXEC, RLOGIN,
RTELNET, RTSP:TCP, RTSP:UDP,
SFTP, SMTP, SNMP:TCP, SNMP:UDP,
SNMP-TRAPS:TCP,
SNMP-TRAPS:UDP, SQL-NET,
SSH:TCP, SSH:UDP, STRMWORKS,
TACACS, TELNET, TFTP, RIP, IKE,
SHTTPD, IPSEC-UDP-ENCAP, IDENT,
VDOLIVE, SSH, SIP-TCP, SIP-UDP,
NFS-TCP, or RPC-TCP
custom service name
ALWAYS_BLOCK, ALWAYS_ALLOW,
BLOCK_BY_SCHEDULE_ELSE_ALLOW,
or
ALLOW_BY_SCHEDULE_ELSE_BLOCK
Schedule1, Schedule2, or
Schedule3
Security Mode Configuration Commands
146
Description
Specifies the default service and
protocol to which the firewall rule
applies.
The custom service that you have
configured with the security
services add command and to
which the firewall rule applies.
Specifies the type of action to be
enforced by the rule.
Specifies the schedule, if any, that
is applicable to the rule.