System information

Manual:IP/Proxy
177
Property Description
action (allow | deny; Default: allow) Specifies whether to pass or deny matched packets
dst-address (Ip4[-Ip4 | /0..32] | Ip6/0..128; Default:
)
Destination address of the target server.
dst-host (string; Default: ) IP address or DNS name used to make connection the target server (this is the string user
wrote in browser before specifying port and path to a particular web page
dst-port (integer[-integer[,integer[,...]]]: 0..65535;
Default: )
List or range of ports the packet is destined to
local-port (integer: 0..65535; Default: ) Specifies the port of the web proxy via which the packet was received. This value should
match one of the ports web proxy is listening on.
method (any | connect | delete | get | head | options |
post | put | trace; Default: )
HTTP method used in the request (see HTTP Methods section in the end of this
document)
path (string; Default: ) Name of the requested page within the target server (i.e. the name of a particular web
page or document without the name of the server it resides on)
redirect-to (string; Default: ) In case access is denied by this rule, the user shall be redirected to the URL specified
here
src-address (Ip4[-Ip4 | /0..32] | Ip6/0..128; Default:
)
Source address of the connection originator.
Read only properties:
Property Description
hits (integer) Count of requests that were matched by this rule
Wildcard properties (dst-host and dst-path) match a complete string (i.e., they will not match "example.com" if they
are set to "example"). Available wildcards are '*' (match any number of any characters) and '?' (match any one
character). Regular expressions are also accepted here, but if the property should be treated as a regular expression, it
should start with a colon (':').
Small hints in using regular expressions:
•• \\ symbol sequence is used to enter \ character in console
•• \. pattern means . only (in regular expressions single dot in pattern means any symbol)
•• to show that no symbols are allowed before the given pattern, we use ^ symbol at the beginning of the pattern
•• to specify that no symbols are allowed after the given pattern, we use $ symbol at the end of the pattern
•• to enter [ or ] symbols, you should escape them with backslash \.
It is strongly recommended to deny all IP addresses except those behind the router as the proxy still may be used to
access your internal-use-only (intranet) web servers. Also, consult examples in Firewall Manual on how to protect
your router.