Using the HTTP virtual firewall

About the HTTP virtual firewall

The HTTP virtual firewall feature enables you to maintain security on your filer.

You can restrict HTTP requests by marking the subnetwork interface over which they arrive as "untrusted." An untrusted interface provides only HTTP access to your filer on a read-only basis.

Mark an interface untrusted if it meets all the following conditions:

You know you are going to service HTTP requests over that interface.
You don't want to allow requests through protocols other than HTTP.
You want to restrict access to the filer through that interface to read-only access.

By default, a subnetwork interface is trusted.

Syntax

Mark an interface as untrusted or trusted by setting an option to the ifconfig command. Following are examples of the command:

To mark the f0 interface as untrusted, enter the following command:
```
ifconfig f0 untrusted 
```
To mark the f0 interface as trusted, enter the following command:
```
ifconfig f0 trusted 
```

Part No. 210-02334
File: http3.htm
Last updated: 02/24/99 12:16:45