Specifications
CUSTOMATCOMMANDS
201 HSPA+ATCommandsReferenceGuide
WhentheserviceisactiveitisonaspecificATinstance—seeAT#TCPATRUNCFG—thatinstancecannotbeused
foranyotherscope.Forexample,ifthemultiplexerrequeststoestablishtheinstance,therequestisrejected.
Thecurrentsettingsarestoredinnon‐volatilememory.
Tostarttheserviceautomaticallywhenthemoduleispoweredon,theautomaticPDPcontextactivationmust
beset.SeeAT#SGACTCFG.
TCPATRunFirewallList#TCPATRUNFRWL
SetcommandcontrolstheinternalfirewallsettingsfortheTCPATRUNconnection.
ReadcommandreportsthelistofallACCEPTchainrulesregisteredintheFirewallsettingsintheformat:
#TCPATRUNFRWL:<ip_addr>,<net_mask>
#TCPATRUNFRWL:<ip_addr>,<net_mask>
…
OK
Testcommandreturnstheallowedvaluesforparameter<action>.
Syntax
Command Commandtype
AT#TCPATRUNFRWL=<action>,<ip_addr>,<net_mask> Set
AT#TCPATRUNFRWL? Read
AT#TCPATRUNFRWL=? Test
ParametersandValues
<action> Commandaction.
0 Removeselectedchain.
1 AddanACCEPTchain.
2
Removeallchains(DROPeverything);<ip_addr>and<net_mask>hasnomeaning
inthiscase.
<ip_addr>
Stringtype,remoteaddressaddedintotheACCEPTchain.CanbeanyvalidIP
addressintheformat:xxx.xxx.xxx.xxx.
<net_mask>
Stringtype,masktobea
ppliedonthe<ip_addr>.ItcanbeanyvalidIPaddress
maskintheformat:xxx.xxx.xxx.xxx.
CommandreturnsOKresultcodeifsuccessful.
FirewallgeneralpolicyisDROP.Thereforeallpacketsthatarenotincludedintoan
ACCEPTchainrulearesilentlydiscarded.
WhenapacketcomesfromtheIPa
ddressincoming_IP,thefirewallchainrules
arescannedformatchingwiththefollowingcriteria:
incoming_IP&<net_mask>=<ip_addr>&<net_mask>
Ifcriteriaismatched,thenthepacketisacceptedandtherulescanisfinished.If
criteriaisnotmatchedforanychainthepacketissilentlydropped.
Notes
Amaximumof5firewallscanbepresentatsametimeinthelist.
Thefirewalllistissavedinnon‐volatilememory.