Iprule - D-Link NetDefend DFL-210 Cli Reference Manual

3.30. IPRule

3.30. IPRule
Description
An IP rule specifies what action to perform on network traffic that matches the specified filter criter-
ia.
Properties
Index
Name
Action
SourceInterface
SourceNetwork
DestinationInterface
DestinationNetwork
Service
Schedule
NATAction
NATSenderAddress
NATSenderPort
NATPool
SATTranslate
SATTranslateToIP
SATTranslateToPort
SATAllToOne
SLBAddresses
SLBStickiness
SLBIdleTimeOut
The index of the object, starting at 1. (Identifier)
Specifies a symbolic name for the rule. (Optional)
Reject, Drop, FwdFast, Allow, NAT, SAT or SLB_SAT.
Specifies the name of the receiving interface to be compared
to the received packet.
Specifies the sender span of IP addresses to be compared to
the received packet.
Specifies the the destination interface to be compared to the
received packet.
Specifies the span of IP addresses to be compared to the des-
tination IP of the received packet.
Specifies a service that will be used as a filter parameter when
matching traffic with this rule.
By adding a schedule to a rule, the security gateway will only
allow that rule to trigger at those designated times. (Optional)
Specify sender address or Use interface address. (Default:
UseInterfaceAddress)
Specifies which sender address will be used.
Translate to this port. (Optional)
Specifies which sender address will be used.
Specifies whether to translate source IP or destination IP.
(Default: DestinationIP)
Translate to this IP address.
Translate to this port. (Optional)
Rewrite all destination IPs to a single IP. (Default: No)
The IP addresses of the servers in the server farm.
Specifies stickiness mode. (Default: None)
New connections that arrive within the idle timeout are as-
signed to the same real server as previous connections from
that address. The timeout is refreshed after each new connec-
tion. (Default: 30)
130
Chapter 3. Configuration Reference