hit counter script

D-Link NetDefendOS User Manual page 121

Network security firewall
Hide thumbs Also See for NetDefendOS:
Table of Contents

Advertisement

Specifying the Source IP
It is also possible to construct and send out an ICMP ping packet with a specific source IP address
using the -srcip option. For example:
gw-world:/> ping 10.6.58.10 -srcip=192.168.3.1 -verbose
Again, this is a feature that is intended for use by administrators for network testing purposes.
Note: ALGs cannot be used alongside -srcif or -srcip
A restriction with the -srcif and -srcip options is that ALGs cannot be used with the IP
rules that are triggered.
Combining -srcif with -srcip
It is possible to combine -srcip with the -srcif option to simulate a packet arriving on a given
interface with a given source IP. This is probably the most common way that both of these
options are used.
In this example it can also be seen how the simulation will also show any pipe rules that are
triggered:
gw-world:/> ping 10.6.58.10 -srcif=lan -srcip=192.168.3.1 -verbose
Rule and routing information for ping:
PBR selected by rule "iface_member_main" - PBR table "main"
allowed by rule "nat_all_wan"
Sending 1 4-byte ICMP ping to 10.6.58.10 from 192.168.3.20
sent via route "0.0.0.0/0 via lan, gw 192.168.3.1" in PBR table "main"
ICMP Reply from 10.6.58.10
Ping Results:
Sent: 1, Received:1, Avg RTT: 10.0 ms
The above output shows how a Pipe Rule object called out_pipe is triggered.
These options could also be combined further with the -tcp and port options.
Ping with IPv6
So far, the use of the ping command has been discussed only for IPv4 addresses. IPv6 addresses
can also be pinged. For example:
gw-world:/> ping 2001:DB8::2
Using IPv6 with ping is discussed further in Section 3.2, "IPv6 Support".
FQDN Resolution
When issuing a ping request from NetDefendOS, it is possible to specify the destination as a fully
qualified domain name (FQDN). This is then resolved by NetDefendOS to a numerical IP address
by using an external DNS server. For example:
gw-world:/> ping server.example.com
piped by rule "out_pipe" - Fwd Chain: out
piped by rule "out_pipe" - Ret Chain: in
seq=0
time= 10 ms
121
Chapter 2: Management and Maintenance
TTL=247

Hide quick links:

Advertisement

Table of Contents
loading

Table of Contents