Adds a rule to the client-side rule group by specifying a number to the rule.
Log on to the system as a user with administrator rights.
Change the directory to the Firewall bin directory:
/opt/McAfee/ens/fw/binRun the command:
./mfefwcli --fw-rule-add--name— Specify the name of the rule. This is a mandatory option.--action— Specify the value of the action asallowordeny. This is a mandatory option.--log— Enable logging for a specified rule when a new packet matches the rule. The subsequent packets within the same connection are not logged.--direction— Specify the direction (in,outoreither) of the traffic to match in a rule. You can specify only one argument.--state— Specify the status of the rule as eitherenableordisable. The default value is enable.--notes— Add a description for the rule for reference.--netproto[network protocol name] — Specify the network protocol to match in a packet. If this option is not specified, the rule matches IPv4 addresses.The protocol name can have the following values:
ipv4— to specify only ipv4 addressesipv6— to specify only ipv6 addressesany— to specify ipv4 and ipv6 addresses
Add a rule to deny a traffic on either direction with logging enabled:
./mfefwcli --fw-rule-add --index 1--name rule_name --action deny --log enable --direction either --state enable --proto any