|
ISDB Object IDs:
- Amazon-AWS (393320).
- Amazon-AWS.CloudFront (393481).
- If the user wants to change the service ports for 'Amazon-AWS.CloudFront' from the default (1-65535) to 80 and 443.
config firewall internet-service-addition
edit 393481
set comment 'Amazon-AWS.CloudFront'
config entry
edit 1
set protocol 6
config port-range
edit 1
set start-port 443
set end-port 443
next
edit 2
set start-port 80
set end-port 80
next
end
- Start the command to apply changes to 'Internet services' :
execute internet-service4 refresh
Internet Service IPv4 refresh start ...
Start to initialize APP file.
Start to initialize MAP file.
Internet Service is refreshed.
execute internet-service6 refresh
Internet Service IPv6 refresh start ...
Start to initialize APP file.
Start to initialize MAP file.
Internet Service is refreshed.
- When checking information for Internet Service ID: 393481, the port does not change.
diagnose internet-service id 393481
...
216.137.62.0-216.137.62.255 country(840) region(2039) city(1106) blocklist(0x0) reputation(4), popularity(5) domain(1151) botnet(4096) proto(6) port(1-65535)
216.137.62.0-216.137.62.255 country(840) region(2039) city(1106) blocklist(0x0) reputation(4), popularity(5) domain(1151) botnet(4096) proto(17) port(1-65535)
216.137.63.0-216.137.63.255 country(840) region(596) city(1207) blocklist(0x0) reputation(4), popularity(5) domain(1151) botnet(4096) proto(6) port(1-65535)
216.137.63.0-216.137.63.255 country(840) region(596) city(1207) blocklist(0x0) reputation(4), popularity(5) domain(1151) botnet(4096) proto(17) port(1-65535)
Note:
If the ISDB object is a child of another ISDB object then the 'internet-service-addition' configuration block for the child ISDB object does not apply.
Hence, The parent object 'Amazon-AWS' of 'Amazon-AWS.CloudFront' also needs to have its settings changed.
config firewall internet-service-addition
edit 393481
set comment 'Amazon-AWS.CloudFront'
config entry
edit 1
set protocol 6
config port-range
edit 1
set start-port 443
set end-port 443
next
edit 2
set start-port 80
set end-port 80
next
edit 393320
set comment 'Amazon-AWS'
config entry
edit 1
set protocol 6
config port-range
edit 1
set start-port 443
set end-port 443
next
edit 2
set start-port 80
set end-port 80
# diagnose internet-service id 393481
...
216.137.62.0-216.137.62.255 country(840) region(2039) city(1106) blocklist(0x0) reputation(4), popularity(5) domain(1151) botnet(4096) proto(6) port(443 80)
216.137.62.0-216.137.62.255 country(840) region(2039) city(1106) blocklist(0x0) reputation(4), popularity(5) domain(1151) botnet(4096) proto(17) port(1-65535)
216.137.63.0-216.137.63.255 country(840) region(596) city(1207) blocklist(0x0) reputation(4), popularity(5) domain(1151) botnet(4096) proto(6) port(443 80)
216.137.63.0-216.137.63.255 country(840) region(596) city(1207) blocklist(0x0) reputation(4), popularity(5) domain(1151) botnet(4096) proto(17) port(1-65535)
|
