Exception
From Wiki of WFilter NG Firewall
(Difference between revisions)
(One intermediate revision by one user not shown) | |||
Line 15: | Line 15: | ||
** "*:port", all traffic on this port will be whitelisted. | ** "*:port", all traffic on this port will be whitelisted. | ||
** "**domain", whitelist this domain, also whitelist ip addresses of this domain. (Example: "**www.wfilterngf.com") | ** "**domain", whitelist this domain, also whitelist ip addresses of this domain. (Example: "**www.wfilterngf.com") | ||
− | ** '''Subnet''', all traffic to this subnet will be whitelisted. (Example: "120.55.165.*" or "120.55.*.*"). | + | ** '''Subnet''', all traffic to this subnet will be whitelisted. (Example: "120.55.165.0/24, 120.55.165.*" or "120.55.*.*"). |
** '''*:*''', all traffic will be whitelisted. | ** '''*:*''', all traffic will be whitelisted. | ||
+ | ** "-domain", exception to exceptions, wildcards(* ?) are supported. (Example: "-news.wfilterngf.com") | ||
[[File:exception001.png|800px]] | [[File:exception001.png|800px]] |
Latest revision as of 16:23, 18 October 2021
[edit] 1 Exception
You can set exceptions for the applied clients:
- Whitelist IP, port and domains.
- Whitelist applications.
[edit] 2 Settings
You can whitelist "IP/Domains" or "Applications".
- Whitelisted contents won't be blocked by other policies.
- Either "IP/Domains" OR "applications" can be excepted.
- Syntax for "IP/Domains":
- One domain per line, wildcards(* ?) are supported.
- One ip address per line(no wildcard). All traffic to this IP will be whitelisted.
- "IP:port", only whitelist a certain port on a certain IP.
- "*:port", all traffic on this port will be whitelisted.
- "**domain", whitelist this domain, also whitelist ip addresses of this domain. (Example: "**www.wfilterngf.com")
- Subnet, all traffic to this subnet will be whitelisted. (Example: "120.55.165.0/24, 120.55.165.*" or "120.55.*.*").
- *:*, all traffic will be whitelisted.
- "-domain", exception to exceptions, wildcards(* ?) are supported. (Example: "-news.wfilterngf.com")