Adding a Firewall Rule for Outgoing Activity by IPv6 Address
To add a rule for filtering outgoing activity by IP address, press the F6 key in the Dynamic Filtering - Outgoing IPv6 Address Security screen, shown in Setting Firewall Rules for Outgoing Activity by IP Address
The Dynamic Filtering - Add Outgoing IPv6 Address screen appears:
Dynamic Filtering- Add Outgoing IPv6 Address Type choices, press Enter. IPv6 Address . . . . . Address prefix length . 128 1-128 Text . . . . . . . . . FTP . . . . . . . . . . Y=Yes , S=SSL only, A=Skip checks B=SSL+Skip checks L=Skip checks+Log M=SSL+Skip checks+Log S=SSL requires that the connection is encrypted (Checked from V5R1) F3=Exit F12=Cancel |
Enter or modify information in the following fields:
IPv6 Address
The IPv6 address for the range of addresses. In addition to an IPv6 address, you can set this field to *ALL for rules applied to all IPv6 ranges that aren't otherwise specified.
Address prefix length
The length of the IPv6 address prefix. This can be set to from 1-128.
Text
A free-form text description of the IPv6 address range.
FTP
A letter or blank space indicating how Firewall is to filter FTP requests going to that IPv6 Address Range.
The possible values are:
- Blank or N: Reject all incoming activity
- S: Allow activity, but do not log this
- Y: Allow activity
In many situations, you can dramatically improve performance by using options B or L. For example, you might use them when an IP address that you know to be well secured and is using SSL, and which doesn't require checking the SQL statements, sends a high volume of requests.