19216811.liveFirewall
Firewall command reference
iMG/RG Software Reference Manual (IPNetwork Functions)
4-124
Status : enabled
Permitted? : true
See also
FIREWALL LIST POLICIES
FIREWALL LIST PORTFILTERS
4.3.2.0.18 FIREWALL ADD VALIDATOR
Syntax
FIREWALL ADD VALIDATOR <name> <policyname> {INBOUND|OUT-
BOUND|BOTH} <ipaddress> <hostipmask>
Description
This command adds a validator to a firewall policy. Traffic is blocked based on the source/
destination IP address and netmask. This command allows you to specify:
•
the IP address(es) and netmask(s) that you want to block
•
the direction of traffic that you want to block
Once you have added a validator to a policy, specifying the IP address and direction val-
ues, you can reuse these values by adding the validator to other policies.
Options
The following table gives the range of values for each option that can be specified with
this command and a Default Value (if applicable).
Option
Description
Default Value
name
An arbitrary name that identifies the portfilter. It can be
made up of one or more letters or a combination of let-
ters and digits, but it cannot start with a digit.
N/A
policyname
An existing firewall policy. To display policy names, use the
FIREWALL LIST POLICIES command.
N/A
inbound
Validator blocks incoming traffic based on IP addresses.
N/A
outbound
Validator blocks outgoing traffic based on IP addresses.
N/A
both
Validator filters inbound and outbound traffic based on IP
addresses.
N/A
ipaddress
The IP address that you want to carry out IP address vali-
dation on. The IP address is displayed in the following for-
mat: 192.168.102.3
N/A
hostipmask
The IP mask address. If you want to filter a range of
addresses, you can specify the mask, e.g., 255.255.255.0. If
you want to filter a single IP address, you can use the spe-
cific IP mask address, e.g., 255.255.255.255.
N/A