Firewall Deny - Efficient Networks Router family Command Line Interface Manual

®
Efficient Networks Router family
Command Line Interface Guide
Example
Example command deletes all firewall rules from the allow rules list.
-> firewall delete all allow
Response
Command prompt.

firewall deny

Creates a firewall rule that will be added to the firewall deny rules list. To view the
current deny firewall rules, use the
NOTE:
If NAT is enabled on the router, then the outgoing firewall rules should be specified in
terms of the private addresses. However, for inbound rules, the rules would need to
use the router's WAN address.
Mgmt Class
Security (R/W)
Input Format
firewall deny <protocol | application> [<parameters>]
Parameters
The following parameters specify the <protocol> (-p) or <application> (-a)
characteristics that a packet must have in order to match the firewall rule:
-p | tcp | udp | icmp | <protocol number>
The packet must have the specified protocol.
-a imap | telnet | bootp | nntp | rpc | tftp | smtp | dns | ftp |
rexec | rsh | rlogin | syslog | winframe | rdp | http | htps | ntp
| smb | ras | realaudio | netmeeting | aolim| quicktime | cuseme |
netshow | pptp | nfs | nis | traceroute | sqlnet | ipsec
Packets must match the assigned application characteristics.
a
Integer, numerical protocol ID.
®
Efficient Networks
Chapter 18: Stateful Firewall Commands
firewall list command.
a
Page 18-9