Difference between revisions of "FW Monitor examples"

From Tech-Wiki
Jump to: navigation, search
 
Line 6: Line 6:
 
  fw monitor -e "accept host(10.1.1.10);"  
 
  fw monitor -e "accept host(10.1.1.10);"  
  
Filtering based on a Host pair"
+
Filtering based on a Host pair and subnet
  
 
  fw monitor -e "accept host(10.1.1.10) or host(10.1.1.2) and net(10.0.0.0,8) and port(22);"  
 
  fw monitor -e "accept host(10.1.1.10) or host(10.1.1.2) and net(10.0.0.0,8) and port(22);"  

Latest revision as of 19:44, 8 November 2017

Back to Gaia

Filtering based on a single Host: (no matter if it is the source or destination)

fw monitor -e "accept host(10.1.1.10);" 

Filtering based on a Host pair and subnet

fw monitor -e "accept host(10.1.1.10) or host(10.1.1.2) and net(10.0.0.0,8) and port(22);" 

Filtering based on application:

fw monitor -e 'accept port(25);'

Strict filter:

fw monitor -e "src=10.1.1.10 and dst=200.1.1.11 and dport=80,accept;"