Adding a Firewall Rule for Outgoing Activity by IP Address

To add a rule for filtering outgoing activity by IP address, press the F6 key in the Dynamic Filtering - Outgoing IP Address Security screen, shown in Setting Firewall Rules for Outgoing Activity by IP Address (STRFW > 2 > 5).

The Dynamic Filtering - Add Outgoing IP Address screen appears:

                  ​ Dynamic Filtering- Add Outgoing IP Address​                   
                                                                                
 Type choices, press Enter.                                                    ​ 
                                                                                
 IP Address  . . . . .​  ​                                 ​ Address, *ALL​         
 Subnet mask . . . . .​  ​ 255.255.255.255                 ​ F4 for list​           
 Text  . . . . . . . .​  ​                                                        
                                                                                
 FTP . . . . . . . . .​  ​                                 ​ Y=Yes , S=SSL only,​   
                                                         ​
 A=Skip checks      ​   
                                                         ​
 B=SSL+Skip checks  ​   
                                                         ​
 L=Skip checks+Log  ​   
                                                         ​
 M=SSL+Skip checks+Log​ 
                                                                                
                                                                                
                                                                                
                                                                                
 S=SSL requires that the connection is encrypted (Checked from V5R1)​            
                                                                                
                                                                                
                                                                                
 F3=Exit   F4=Select Subnet    F12=Cancel​                                       
                                                                                
                                                                                

Enter or modify information in the following fields:

IP Address/*LCL

The IPv4 address for the address range. In addition to IP addresses, you can set this field to *ALL for rules applied to all IP address ranges that aren't otherwise specified.

Subnet mask

The subnet mask for the address range. For a list of possible subnet masks, showing the number of addresses that the range would include, press the F4 key.

Text

A free-form text description of the IP address range.

FTP

A letter or blank space showing how the system filters outgoing FTP requests:

The possible values are:

  • Blank or N: Reject all incoming activity
  • S: Allow activity, but do not log this
  • Y: Allow activity

To use options B, M, and S, which use SSL, the connection must be encrypted.