F3726, F3211, F3174, R5135, R3816-HP Firewalls and UTM Devices Attack Protection Command Reference-6PW100

71
Syntax
command-filtering keyword-entry keyword-entry-name
undo command-filtering keyword-entry keyword-entry-name
Default
No keyword filtering entry is specified for command word filtering.
Views
FTP filtering policy view, Telnet filtering policy view
Default command level
2: System level
Parameters
keyword-entry-name: Specifies the name of the keyword filtering entry, a case-sensitive string or 1 to 32
characters. The keyword filtering entry must already exist.
Usage guidelines
You can specify multiple keyword filtering entries for command word filtering.
Examples
# Create a keyword filtering entry HarmCmd and add keywords delete and format to the entry.
<Sysname> system-view
[Sysname] content-filtering keyword-entry HarmCmd
[Sysname-contflt-keyword-HarmCmd] keyword fix-string delete
[Sysname-contflt-keyword-HarmCmd] keyword fix-string format
[Sysname-contflt-keyword-HarmCmd] quit
# Apply the keyword filtering entry HarmCmd for command word filtering in the FTP filtering policy
FTPBanned.
[Sysname] content-filtering ftp-policy FTPBanned
[Sysname-contflt-ftp-policy-FTPBanned] command-filtering keyword-entry HarmCmd
[Sysname-contflt-ftp-policy-FTPBanned] quit
# Apply the keyword filtering entry HarmCmd for command word filtering in the Telnet filtering policy
TelnetBanned.
[Sysname] content-filtering telnet-policy TelnetBanned
[Sysname-contflt-telnet-policy-TelnetBanned] command-filtering keyword-entry HarmCmd
Related commands
• content-filtering keyword-entry
• content-filtering ftp-policy
• content-filtering telnet-policy
content-filtering activex-blocking suffix
Use content-filtering activex-blocking suffix to add an ActiveX blocking suffix keyword to the ActiveX
blocking suffix list.
Use undo content-filtering activex-blocking suffix to remove an ActiveX blocking suffix keyword from the
ActiveX blocking suffix list.