networkRulesBlacklistEnable
MX-NFW-MIB ·
.0.2250.1.600.1.720
Object
Blacklist Enable
Indicates if blacklisting is enabled for this rule.
* Enable: When a packet establishing a connection matches
this rule, the action is executed and the source IP address
is added to the blacklist.
* Disable: When a packet establishing a connection matches
this rule, the action is executed but the source IP address
is not added to the blacklist.
Note: If rate limiting is enabled for this rule, blacklisted IP
addresses are added to the rate limit blacklist.
Context
- MIB
- MX-NFW-MIB
- OID
.0.2250.1.600.1.720- Type
- column
- Access
- readwrite
- Status
- current
- Parent
- networkRulesEntry
- Table
- networkRulesTable
- Siblings
- 15
Values & Constraints
Type Values
0 | disable |
1 | enable |
Related Objects
Sibling Objects
| Object | Type | Syntax | OID |
|---|---|---|---|
| networkRulesPriority Rule Priority
Unique identifier of the row in the table. | column | SNMPv2-SMIUnsigned32 | .0.2250.1.600.1.100 |
| networkRulesDown Down
Moves the current row downwards. | column | Enumeration | .0.2250.1.600.1.1000 |
| networkRulesInsert Insert
Inserts a new row before this row. | column | Enumeration | .0.2250.1.600.1.1100 |
| networkRulesDelete Delete
Deletes this row. | column | Enumeration | .0.2250.1.600.1.1200 |
| networkRulesActivation Activation
Activates this rule.
* Enable: This rule is active in the firewall.
* Disable: This rule is not in the firewall. | column | MX-TCMxEnableState | .0.2250.1.600.1.200 |
| networkRulesSourceAddress Source Address
Source address of the incoming packet using the following
format: address[/mask] or network interface name/.
Address can be either a n… | column | OctetString | .0.2250.1.600.1.300 |
| networkRulesSourcePort Source Port
Source port of the incoming packet using the following format:
port[-port].
MinPort-MaxPort specifies a port range.
The de… | column | OctetString | .0.2250.1.600.1.400 |
| networkRulesDestinationAddress Destination Address
Destination address of the incoming packet using the following
format: address[/mask] or network interface name/.
The address can… | column | OctetString | .0.2250.1.600.1.500 |
| networkRulesDestinationPort Destination Port
Destination port of the incoming packet using the following
format: port[-port].
MinPort-MaxPort specifies a port range.
… | column | OctetString | .0.2250.1.600.1.600 |
| networkRulesProtocol Protocol
Protocol of the incoming packet.
The protocol can be one of the following:
* All: Match packets using any protocols.
* Tc… | column | Enumeration | .0.2250.1.600.1.700 |
| networkRulesRateLimitValue Rate Limit Value
Number of packets allowed to match this rule from a single
source IP address within a certain time period. | column | Unsigned32 | .0.2250.1.600.1.730 |
| networkRulesRateLimitTimePeriod Rate Limit Time Period
The time period on which to base the rate limit. This period is
expressed in seconds.
Ex.: a RateLimitValue of 10 and a RateLi… | column | Unsigned32 | .0.2250.1.600.1.740 |
| networkRulesConnectionState Connection State
Connection state associated with the incoming packet.
The connection state can be one of the following:
* All: Matc… | column | Enumeration | .0.2250.1.600.1.750 |
| networkRulesAction Action
Action taken when this rule matches a packet.
Action can be one of the following:
* Accept: Let the packet through.
* Rejec… | column | Enumeration | .0.2250.1.600.1.800 |
| networkRulesUp Up
Moves the current row upwards. | column | Enumeration | .0.2250.1.600.1.900 |