Alcatel SPEED TOUCH 570 Cli Reference Manual page 132

firewall rule create
firewall rule create
chain
[index]
[srcintf]
[srcintfgrp]
132
chain = <string>
[index = <number>]
[srcintf [!]= <string>]
[srcintfgrp [!]= <{wan|local|lan}>]
[srcbridgeport [!]= <number>]
[src [!]= <ip-address>]
[srcmsk = <ip-mask(dotted or cidr)>]
[dstintf [!]= <string>]
[dstintfgrp [!]= <{wan|local|lan}>]
[dst [!]= <ip-address>]
[dstmsk = <ip-mask(dotted or cidr)>]
[tos [!]= <number{1-255}>]
[prot [!]= <{tcp|udp|icmp|protocol}>]
[syn <yes|no>]
[urg <yes|no>]
[ack <yes|no>]
[srcport [!]= <{ftp|ftp-data|telnet|mail|smtp|dns|domain|tftp|port}>]
[srcportend = <{ftp|ftp-data|telnet|mail|smtp|dns|domain|tftp|port}>]
[dstport [!]= <{ftp|ftp-data|telnet|mail|smtp|dns|domain|tftp|port}>]
[dstportend = <{ftp|ftp-data|telnet|mail|smtp|dns|domain|tftp|port}>]
[icmptype [!]= <{echo-reply|destination-unreachable|source-quench|
redirect|echo-request|router-advertisement|
router-solicitation|time-e xceeded|parameter-problems|
timestamp-request|timestamp-reply|
information-request|information-reply|
address-mask-request|address-mask-reply|
icmpnumber}>]
[icmpcode [!]= <number{0-15}>]
[icmpcodeend = <number{0-15}>]
[clink = <string>]
action = <{accept|deny|drop|count}>
G wan
G
G