Adding Firewall Settings for a User based on Services
To create filters based on services (such as FTP, SQL, NBD, or DDM), enter 1 in the Selection field of the Add User Security screen, shown in Adding Firewall Settings for a User (STRFW > 3 > 1, F6).
The Add User to Server Security screen appears.
Add User to Server Security User . . . . . . . . . PLONY Subset . . . . >> Set: 1=Allow (+), 2=Reject, 3=By Verb (V), 4=Allow+Skip object check (S) Log: 1=No, 2=Rejects, 4=All, blank=By server setting Server User Supports Server Control Allowed Set Log Verbs FILTFR No Yes Original File Transfer Function SSHD No Yes SSH,SFTP,SCP- Secured CMD Entry,FTP,COPY FTPLOG No Yes FTP Server Logon FTPSRV No Yes Yes FTP Server-Incoming Rqst Validation FTPCLN Usr>srv Yes Yes FTP Client-Outgoing Rqst Validation REXLOG No Yes REXEC Server Logon REXEC No Yes REXEC Server Request Validation RMTSQL No Yes Yes Original Remote SQL Server SQLENT No Yes Database Server - entry SQL Full Yes Yes Database Server - SQL access & Showcase DBOPEN No Yes Yes Open Database More... F3=Exit F4=Prompt F8=Print F9=Object security F10=Logon security F11=Modify Set⁄Log F12=Cancel F23=Reject all |
Each line of the main part of the screen contains the settings for a single service. It includes these fields:
Server
The short name of the server.
Server Control
The current general settings for the service, as set in Setting Firewall Rules for Servers.
User Allowed
The setting for the user or group and server. It can be set to:
- Yes: Accept requests
- No: Reject requests
- By Verb: The response depends on the verb used (such as DELETE, INSERT, COPY), determined by entering 3 in the Set column.
Set
Type one of the following values and press Enter to change the setting for this user or group and server. (To toggle the entry prompt between the Set and Log fields, press the F11 key.)
- 1. Allow all requests
- 2. Reject all requests
- 3. If the Verb Support field is set to Yes, establish settings based on verbs that the server interprets. The Modify Server Verb Authority screen appears, as shown in Modifying Firewall Settings for a User based on Server Verbs.
- 4. Allow all requests, skipping object checks.
Log
Type one of the following values to set whether Firewall logs requests to this server. (To toggle the entry prompt between the Set and Log fields, press the F11 key.)
- Blank: No change
- 1: None
- 2: Rejects
- 4: All
Supports Verbs
If the server accepts distinct verbs, this shows Yes, and you can enter settings for the verbs by entering 3 in the Set column.
(unlabeled)
A free-form text description of the server
To establish settings based on verbs for a server that shows Yes in its Verb Support column, enter 3 in the Set column. The Modifying Server Verb Authority appears, as shown in Modifying Firewall Settings for a User based on Server Verbs.
To reject all requests on all servers, press the F23 key (Shift+F11).