The name SMBCD seems to indicate that is has something with scanning
windows filesharing protocols smb/cifs. Or something for connecting to
windows fileshares. Not sure what the C stands for. SMB C-something
daemon ?
ORIGINAL: RH ban ip from DOS Policy We get many alerts for icmp sweeps
etc, and they are blocked from the DOS Policy, but I can' t ban an IP
that keeps triggering the rule! You can do this from CLI. See set
quarantine here:
http://docs.fortinet.com/f...
ORIGINAL: dannycheng85 But isn' t URL filter takes priority, then
followed by web filter? If that' s the case, wouldn' t all website will
be allowed looking at the ' implicit allow' ? Yes, you' re right about
the precedence but I was only talking abo...
ORIGINAL: dannycheng85 But the * wildcard Allow will appear by default,
whenever I add in any entries, as shown below... 1 facebook.com Simple
Exempt * * Allow Implicit Thats no problem. Your rules should override
the implicit rule.
I would use type Simple rather and then pop a wildcard * at the bottom
with Block action. Something like this perhaps: 1 facebook.com Simple
Exempt 2 akamaihd.net Simple Exempt 3 * Wildcard Block
