topic Re: Discuss with "fw6 sam_policy add" in Firewall and Security Management

Discuss with "fw6 sam_policy add"

Herschel_Liang — Tue, 26 Jul 2022 13:36:17 GMT

[Expert@R80.30_GW1:0]# fw6 sam_policy add -a d -l r -t 3600 -n aaa quota service any source cidr:2::2/128 concurrent-conns 1000 fl ush true
add quota: validation failed: Bad source 'cidr:2::2/128' (-5)
[Expert@R80.30_GW1:0]# fw6 sam_policy add -a d -l r -t 3600 -n aaa quota service any source cidr:2::2/12 concurrent-conns 1000 flush true add quota: validation failed: Bad source 'cidr:2::2/12' (-5)
[Expert@R80.30_GW1:0]# fw6 sam_policy add -a d -l r -t 3600 -n aaa quota service any source cidr:"2::2/12" concurrent-conns 1000 flush true
add quota: validation failed: Bad source 'cidr:2::2/12' (-5)
[Expert@R80.30_GW1:0]# fw6 sam_policy add -a d -l r -t 3600 -n aaa quota service any source "cidr:2::2/12" concurrent-conns 1000 flush true
add quota: validation failed: Bad source 'cidr:2::2/12' (-5)
[Expert@R80.30_GW1:0]#

I want to block the IPv6 malicious source addresses via the SAM rule and have tried many many times, but it seems that suffer from a syntax issue. Who can tell me what is wrong with it? THX!

Re: Discuss with "fw6 sam_policy add"

PhoneBoy — Tue, 26 Jul 2022 15:24:16 GMT

Perhaps instead of doing this with sam_policy, use:
https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk112454

Re: Discuss with "fw6 sam_policy add"

Herschel_Liang — Wed, 27 Jul 2022 02:47:06 GMT

I have read it, but test fail. I would like to a detail example now.

Re: Discuss with "fw6 sam_policy add"

PhoneBoy — Wed, 27 Jul 2022 14:51:24 GMT

What precise fwaccel6 dos commands did you try and what were their precise results?