Displays the operative list of rules, regardless of where they came from. Rules that came from the user's configuration are numbered with sequence numbers matching the ones they have in the configuration.
Note
You cannot operate directly on the unnumbered rules from the CLI.
Syntax
show ip filter [all] [configured]
Parameters
[all]
Displays all IP filters.
[configured]
Displays the current set of rules in configuration. The rules should match the numbered rules listed by "show ip filter" (assuming IP filtering is enabled).
Example
The following example shows ip filter rules.
hostname (config) # show ip filter
Packet filtering for IPv4: enabled
Apply filters to bridges: no
All active IPv4 filtering rules:
Chain 'INPUT' # Target Proto Source Destination Other DROP icmp all all icmptimestamp-request DROP icmp all all icmptimestamp-reply 1 ACCEPT all all all inb ether+ ACCEPT all all all inb lo ACCEPT all all all inb tun0 Policy: DROP Chain 'OUTPUT' # Target Proto Source Destination Other 1 ACCEPT all all all outb ether+ ACCEPT all all all outb lo DROP all all all outb tun0 Policy: DROP Chain 'FORWARD' No rules. Policy: DROP
User role
Admin
Supported appliances
This command is supported on the following appliances running the specified releases or later:
Network Security: Release 7.5.0
Central Management System: Release 7.5.0.