Firewall Rule Create - THOMSON SPEEDTOUCH 510I - REFERENCE GUIDE RELEASE 4.0 Reference Manual

Firewall Commands

firewall rule create

Create a rule.
SYNTAX:
firewall rule create
chain
[index]
[srcintf]
148
chain = <string>
[index = <number>]
[srcintf [!]= <string>]
[srcintfgrp [!]= <{wan|local|lan}>]
[srcbridgeport [!]= <number>]
[src [!]= <ip-address>]
[srcmsk = <ip-mask(dotted or cidr)>]
[dstintf [!]= <string>]
[dstintfgrp [!]= <{wan|local|lan}>]
[dst [!]= <ip-address>]
[dstmsk = <ip-mask(dotted or cidr)>]
[tos [!]= <number{1-255}>]
[prot [!]= <{<supported IP protocol name>|<number>}>]
[syn = <yes|no>]
[urg = <yes|no>]
[ack = <yes|no>]
[srcport [!]= <{<supported TCP/
UDP port name>|<number>}>]
[srcportend = <{<supported TCP/
UDP port name>|<number>}>]
[dstport [!]= <{<supported TCP/
UDP port name>|<number>}>]
[dstportend = <{<supported TCP/
UDP port name>|<number>}>]
[icmptype [!]= <{<supported ICMP type name>|<number>}>]
[icmpcode [!]= <number{0-15}>]
[icmpcodeend = <number{0-15}>]
[clink = <string>]
action = <{accept|deny|drop|count}>
The name of the chain to insert the rule in.
The number of the rule before which the new rule must be added.
The name of the interface the packet should [or should NOT] arrive
on to make this rule apply.
(NOT applicable if used in a chain assigned to the output hook)
REQUIRED
OPTIONAL
OPTIONAL
E-SIT-CTC-20021203-0003 v1.0