Table of Contents
Advertisement
FIREWALL COMMANDS
[no] ftp-filter object-name [ permit ] [ deny ] [ log ]
object-name
permit
deny
log
example:
To create a global FTP application filter named myftp that permits put, get, and ls commands,
enter:
SR/configure> firewall global SR/configure/firewall global> object SR/configure/firewall global/
object>
To remove the FTP commands put and get from a global FTP permit application filter named
myftp, enter:
SR/configure/firewall global/object>
To create a global FTP application filter named ftpdeny that prevents users from changing
directory levels or making new directories, enter:
SR/configure/firewall global/object>
To delete a global FTP application filter named myftp, enter:
SR/configure/firewall global/object>
To create a map-specific FTP application filter named corpftp that allows permit, get, and ls
commands, enter:
SR/configure> firewall corp SR/configure/firewall corp>
object>
applies to:
All modules
958
Avaya Secure Router 3120 Command Reference Guide
parameter
ftp-filter myftp permit put get ls
ftp-filter corpftp permit put get ls
definition
The name of the FTP-filter object.
The list of FTP commands to allow. Includes: put, get,
ls, mkdir, cd, and pasv. Enter commands listed as
strings separated by a space.
The list of FTP commands to prevent. Includes: put,
get, ls, mkdir, cd, and pasv. Enter commands listed as
strings separated by a space.
Enables or disables logging.
no ftp-filter myftp permit put get
ftp-filter ftpdeny deny mkdir cd
no ftp-filter myftp
object SR/configure/firewall corp/
December 2010
Advertisement
Table of Contents
