Firewall IP Syntax Overview

Firewall IP Address Reference

Simple Syntax

1. The simplest syntax is just a single valid IP address. For example, 192.168.1.10 and 169.254.43.11 are valid entries.
2. You can also enter masked IP addresses which allows you to cover an entire range of IPs. For example, 10.0.1.0/24 and 192.0.0.0/8 are valid entries.

Advanced Syntax

The advanced IP syntax not only gives you control over the IP address, but also the protocol (udp or tcp), flow direction (inbound or outbound), and port. The advanced syntax is:

protocol:flow:port:ip

1. protocol: Either udp or tcp. protocol is optional, and if not given, tcp is assumed.
2. flow: in or out. If protocol is given, then flow is required, otherwise flow is optional. If flow is not given, in is assumed.
3. s/d=port: A single port number. You must also specify if the port is the source port (s=), where the packet originates from, or the destination port (d=), where the packet will end up.
4. s/d=ip: A valid IP address. You may use an IP address or an IP address and mask. You must also specify if the IP address is the source IP (s=), where the packet originates from, or the destination IP (d=), where the packet will end up.

Example 1

Inbound TCP to destination port 3306 from 172.60.32.0/24

d=3306:s=172.60.32.0/24

Example 2

Inbound TCP from port 3000 from 24.202.16.11

s=3000:s=24.202.16.11

Example 3

Outbound TCP to destination port 22 to destination host 65.114.132.9

out:d=22:d=65.114.132.9

Example 4

Inbound UDP to destination port 1024 from destination host 43.213.13.20

udp:in:d=20:s=43.213.13.20