Raritan Computer SX - Manual (Page 162)

144 D OMINION SX U SER G UIDE
Firewall Command
The firewall command provides control for the turning on or off the firewall.
The syntax of the firewall command is:
firewall [enable <true|false>]
The firewall command options are described in the following table.
Table 59 Firewall Command
C OMMAND O PTION D ESCRIPTION
enable <true|false>
Enable/Disable firewall with true or false
Command Example
admin > Security > Firewall > firewall enable true
Note: Use the following when working with the Firewall.
Chain FORWARD (policy ACCEPT)
target prot opt source destination
When you enable IP forwarding for Dual LAN units, use IPTables rules to create policies for traffic
being forwarded between LAN interfaces.
IPtables Command
The iptables command is an administration tool for IPv4 packet filtering and Network Address
Translation (NAT). The iptables command provides an interface to the linux iptables. The
command parameters and options are the same as the linux system command.
The iptables command options are described in Table 60.
Table 60 iptables Command
C OMMAND O PTION D ESCRIPTION
-A input Append one or more rules to specified chain.
--dport Destination port
--flush Clear the iptables
-j target
Jump based on the following target keywords:
ACCEPT – Packet is passed through (i.e. for INPUT chain, processed
by local stack, for OUTPUT, sent)
DROP –Packet is dropped and no further processing is performed
LOG –
QUEUE – Passes datagram to user space (if supported by kernel)
RETURN – Terminates processing by this chain and resumes the
calling chain (or executes the chain policy if there is no calling chain)
-list
View the current iptables.
--log-prefix
DOM_IPACL
-m state Load a match extension module.
-p The protocol of the traffic.
-s Source address