Firewall Assign - THOMSON 516 Reference Manual

Firewall Commands

firewall assign

Assign a chain to an entry point.
An entry point, also referred to as hook or a Packet Interception Point (PIP), is the location where packets
are intercepted to be compared against a chain of rules.
SYNTAX:
firewall assign
where:
hook The name of the entry point to which a chain must be assigned. Choose between:
input: The point of all incoming traffic.
At this point, it can be determined whether the packet is allowed to reach the
SpeedTouch
sink: The point of all traffic destined to the SpeedTouch
At this point, it can be determined whether the packet is allowed to address the local
host.
forward: The point of all traffic to be forwarded by the SpeedTouch
At this point, it can be determined whether the packet is allowed to be handled, i.e.
routed.
source: The point of all traffic sourced by the SpeedTouch
can be determined whether the packet is allowed to leave the local host.
output: The point of all outgoing traffic.
At this point, it can be determined whether the packet is allowed to leave the
SpeedTouch
chain The name of the chain to be used.
EXAMPLE:
=>firewall list
assign hook=sink
assign hook=forward
assign hook=source
=>firewall chain create chain=Telnet
=>firewall assign hook=sink chain=Telnet
=>firewall list
assign hook=sink
assign hook=forward
assign hook=source
=>
RELATED COMMANDS:
firewall list
firewall unassign
154
hook = <{input | sink | forward | source | output}>
chain = <string>
TM
IP router or local host.
TM
IP router or local host.
chain=sink
chain=forward
chain=source
chain=Telnet
chain=forward
chain=source
Show the association(s) between all hooks or a specified hook and their chain(s).
Clear a specific hook.
TM
IP router itself.
TM
IP router.
TM
IP router. At this point, it
E-DOC-CTC-20040907-0010 v1.0
REQUIRED
REQUIRED