
G&R
running Qsim, V78sim etc. will match filter lines with LOCAL specified.
Local clients are the Host Links products on the system that owns the
/usr/gar (UNIX/Linux) or \gar (Windows) directory, or on other systems
that mount it over the network. Clients coming in through Ggate will match
filter lines with TCP specified. Any client will match filter lines with APPL
specified.
TCP expression:
The expression is IPaddress[/bits]. The /bits part specifies how
many bits of the IP-address will be used during matching. The default is 32, i.e.
use the entire IP-address. If you want to permit/deny the whole of a class C
network specify 24 bits. For the whole of a class B network specify 16 bits.
For the whole of a class A network specify 8 bits. The asterisk (*) matches
anything. Only clients coming into Ggate will match TCP filters.
LOCAL expression:
The expression is the system’s UNIX/Linux or Windows communications node
name. NB! it is not the DSA node name. This name can be displayed using the
command uname –n on UNIX/Linux systems, and displayed in the Network
section of the control panel on Windows server systems. Any application
running on a system with this communications node name will match the
expression. An asterisk (*) matches any communications node name. A specific
expression is only needed when you filter applications running on one of
several systems sharing a single dsa.cfg on a file server.
APPL expression:
The expression is one of Glink, Qsim, V78sim, Pthru, G3270, G5250,
Padcon, Gmailer, Gspool, GUFT, GUFTSRV or Unknown.
filter block_remote
permit local * # implicitly denies remote
filter allow_ip
deny tcp 192.150.211.4 # first deny one terminal
permit tcp 192.150.211.0/24 # allow rest of CLASS C network
permit tcp 18.0.0.0/8 # allow a class A network
permit tcp 128.38.0.0/16 # allow a class B network
filter allow_qsim
permit appl qsim # applies to anyone using Qsim
Gline Line Handlers and Configuration
8
Commentaires sur ces manuels