CONFIG FILTER MANAGE

Level

filter+modify

History

plugin Appears in 6.0.0
implicit Appears in 6.0.0
fwdefault Appears in 6.0.0
option authd_int for services Appears in 6.0.0
option authd_ext for services Appears in 6.0.0
option httpproxy for services Appears in 6.0.0
option smtpproxy for services Appears in 6.0.0
option pop3proxy for services Appears in 6.0.0
option Xvpnd_int for services Appears in 6.0.0
option Xvpnd_ext for services Appears in 6.0.0
option authd for services deprecated in 6.0.0
option proxy for services deprecated in 6.0.0
option webserver for services deprecated in 7.0.0
option sshd for services Appears in 7.0.0
option httpproxy for services removed in 9.0.0
option smtpproxy for services removed in 9.0.0
option pop3proxy for services removed in 9.0.0
option ftpproxy for services removed in 9.0.0
option xvpnd_int for services removed in 9.0.0
option xvpnd_ext for services removed in 9.0.0
option webadmin for services appears in 9.0.0
checkroute appears in 9.1.0
option Bootps for services appears in 1.0.0
option SslVPN for services appears in 1.0.0
option Rtadv for services appears in 1.0.0
option DHCP6 for services appears in 1.0.0
ipstate appears in 1.0.0
plugin and fwdefault become optional in 1.0.0
checkroute deprecated in 2.0.0
option ipfix for services appears in 3.0.0
options authd_int and authd_ext for services merged into AuthPortal in 3.0.0

Description

Buildfilter config

Implementation notes

plugin : attach/unattach plugins on firewall outgoing connections
implicit : enable/disable firewall services rules
fwdefault : enable/disable firewall outgoing default rules
ipstate : enable/disable ipstate flag on outgoing rules

Usage

implicit=(0|1) [plugin=(0|1)] [fwdefault=(0|1)] [ipstate=(0|1)] [services=[authportal],[dns],[dialup],[ha],[ident],[pptp],[serverd],[sshd],[vpn],[webadmin],[bootps],[sslvpn],[rtadv],[dhcp6],[ipfix]]

Example

CONFIG FILTER MANAGE plugin=1 implicit=1 fwdefault=1 ipstate=1 services=dialup,dns,ha,ident,pptp,serverd,sshd+vpn,authportal,webadmin,bootps,sslvpn