Rule (Firewall) - Allied Telesis AT-AR3050S Command Reference Manual

F C
IREWALL OMMANDS
(F )
RULE IREWALL

rule (Firewall)

Overview Use this command to create a rule for the firewall. Firewall security policy is
specified in the form of firewall rules. Each rule defines the appropriate processing
of a type of traffic passing through the firewall.
Use the no variant of this command to remove a rule.
Syntax rule [<1-65535>] {permit|deny|reject|log} <application_name>
from <source_entity> to <destination_entity> [log]
no rule {<1-65535>|all}
C613-50077-01 REV A
Parameter
<1-65535>
permit
deny
reject
log
<application_name>
<source_entity>
<destination_entity>
log
all
Command Reference for AT-AR3050S
AlliedWare Plus™ Operating System - Version 5.4.5-2.x
Description
Rule ID is an integer in the range <1-65535>. If
you don't designate a rule ID, a rule ID will be
automatically generated and it will be greater
than the current highest rule ID.
Permit connections that match the
application, source entity and destination
entity specified with this command.
Drop connections that match the application,
source entity and destination entity specified
with this command. No error message is sent
back to the source host.
Reject connections that match the application,
source entity and destination entity specified
with this command. An error message is sent
back to the source host.
Log events each time a rule is hit. For example,
If you have a deny statement in your rule that
denies a particular application service such as
Telnet, a log event will be created when a host
attempts to telnet into the device.
Application Name. You can either specify an
application name or use the word any, which
stands for all applications. For more
information about applications, see
Application and Entity Commands.
Source entity name. An entity represents a
logical grouping of subnets, hosts or
interfaces. Fore more information about
entities, see Application and Entity Commands
.
Destination entity name.
Optionally log events each time a rule is hit.
Delete all rules.
2104