9.2 Setting Up the Default Filters

If you did not choose to secure the public interfaces of Novell BorderManager during installation, you can do so at any time. This process secures the public interface of your machine and only the traffic to and from a Novell BorderManager service is allowed.

To set up default filters:

  1. At the server console prompt, enter the following command:

    LOAD BRDCFG

  2. When prompted, select Yes to configure the set of default filters and press Enter.

  3. When prompted to launch INETCFG, select No, then press Enter.

  4. From the Filter Configuration Options menu, select Setup Filters on the PublicInterface, then press Enter.

  5. Select the Public Interface from the list, then press Enter.

  6. Follow the prompts to enable and configure the default filters.

The default filter settings block all IPX and IP traffic except to and from the Proxy Services, and Virtual Private Networks (VPNs). Filter support for both IPX and TCP/IP are automatically enabled when the default filters are enabled.

To manually enable or disable the Filter Support option for the TCP/IP protocol:

  1. At the server console prompt, enter the following command:

    LOAD INETCFG

  2. Select Protocols > TCP/IP > Filter Support > Status.

  3. Select Enabled or Disabled, then press Enter.

NOTE:When Filter Support is disabled, the protocol operates as if the filter module is not loaded, and no filtering occurs. When Filter Support is enabled, changes to the filter configurations take effect immediately without reinitializing the server.