Creating Exceptions to Command Filtering Rules

Firewall can include exception to the rules for filtering commands. You can specify that Firewall can accept commands that it would normally reject if the commands include specific additional parameters.

To specify exceptions to command rules, select 9. Command Exceptions from the Native Object Security screen, as shown in Setting Firewall Rules for Native Objects (STRFW > 4).

The Work with Command Exceptions screen appears.

​                         ​ Work with Command Exceptions​                                                                                                            ​ Type options, press Enter.​                                                       ​ 1=Select​ ​ 3=Copy​ ​ 4=Delete​                                                                                                                                      ​ Opt​ ​ Beginning of command and parameters​                     ​ Users​             ​ ​  ​  ​ CALL EVGTST/TDSPPGM (SMZ8 GSEPNTR)                      ​ EVGTST    ​    ​     ​  ​  ​ CALL EVGTST/TDSPPGM PARM(SMZ8 GSEPNTR)                  ​ EVGTST    ​    ​                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  ​       Bottom​                                                                                   ​ F3=Exit    F6=Add new    F8=Print    F11=Un/Fold    F12=Cancel​                  ​                                                                                 ​

Each line of the list contains the following fields:

Command

The command, with the additional parameters. Rules for running the command with parameters that begin with those shown here override the more general rules for the command.

Users

The first user from the list of users for whom this exception is valid. If there are more users, an ellipsis (". . .") follows the name. When you modify the exception via the Modify Command Exception screen, you can see and manage the full list of users.

To create settings for a new command exception, press the F6 key. The Add Command Exception screen appears, as shown in Adding Exceptions to Command Rules.

To print the information from this screen, press the F8 key.

To display more information about the command exception, press the F11 key.

To modify a command exception, enter 1 in the Opt field for the exception. The Modify Command Exception screen appears, as shown in Modifying Exceptions to Command Rules.

To copy settings for one command exception to another, enter 3 in the Opt field for the exception. The Copy Command Exception screen appears, as shown in Copying Exceptions to Command Rules.

To delete the settings for a command exception, enter 4 in the Opt field for the command. The Delete Command Exceptions screen appears, as shown in Deleting Exceptions to Command Rules.