Users Guide

Table 4. Firewall set parameters (continued)
Type specific param # Parameter data
Remove the range of IPv4 addresses rule 5
Data 1:8—IP address range
[1:4]—Starting IP address that is
blocked or unblocked based on the state.
[5:8]—Ending IP address that is blocked
or unblocked based on the state.
For example, if the IP address is
x1.x2.x3.x4, the format is:
1st byte = x1
2nd byte = x2
3rd byte = x3
4th byte = x4
Remove the IPv4 port number rule 6
Data 1:—Protocol TCP/UDP
0 = TCP
1 = UDP
2 = both TCP and UDP
Data 2:3—port number
[2:3]—Port number from the ports
blocked or unblocked based on the state.
Remove the IPv4 port range rule 7
Data 1:—Protocol TCP and UDP
0 = TCP
1 = UDP
2 = both TCP and UDP
Data 2:5—port range
[2:3]—Port number from the ports
blocked or unblocked based on the state.
[4:5]—Port number till ports are blocked
or unblocked based on the state.
Flush IPv4 and IPv6 iptable 8 Flush all the rules set using iptables and
ip6tables.
Drop all 9
Add iptables rules to block IPv4 and IPv6
traffic to the BMC. The state selector is
not used.
Data1: Protocol
Bit 7:2—Reserved
Bit 1—IPv6
Bit 0—IPv4
Remove drop all rule 10
Remove iptables rules to block IPv4
and IPv6 traffic to the BMC. The state
selector is not used.
Data1: Protocol
Bit 7:2—Reserved
Bit 1—IPv6
Bit 0—IPv4
Add IPv4 address with timeout rule 11
Data 1:4—IP address
MS-byte first. The IPv4 address type
blocked or unblocked based on the state.
Date 5:10—Start time
[5:6]—Year
LS-byte first if little endian system. Two-
byte data required to form year.
7—month
8—date
58 Configuration methods