Telit Wireless Solutions ME910G1 - AT#FRWL - Firewall Setup

ME310G1/ME910G1/ML865G1 AT Commands Reference Guide
80617ST10991A Rev.4 Page 405 of 545 2020-04-15
3.13.27. AT#FRWL - Firewall Setup
This command controls the internal firewall settings.
SIM Presence
Setting saved
Can be aborted
MAX timeout
SELINT
Not required
No
No
-
2
AT#FRWL=[<action>[,<ip_addr>[,<net_mask>]]]
Set command controls the internal firewall settings
Parameters:
Name
Type
Default
Description
<action>
integer
0
command action
Values:
0
:
remove selected chain
1
:
add an ACCEPT chain
2
:
remove all chains (DROP everything); <ip_addr> and <net_mask>
have no meaning in this case.
<ip_addr>
string
-
remote address to be added into the ACCEPT chain; it can
be any valid IP address in the format: xxx.xxx.xxx.xxx
<net_mask>
string
-
mask to be applied on the <ip_addr>; it can be any valid IP
address mask in the format: xxx.xxx.xxx.xxx
Additional info:
Firewall criterion
The firewall applies for incoming (listening) connections only. Its general policy is DROP,
therefore all packets that are not included into an ACCEPT chain rule will be silently
discarded.
When a packet comes from the IP address incoming_IP, the firewall chain rules will be
scanned for matching with the following criteria:
incoming_IP & <net_mask> = <ip_addr> & <net_mask>
If criterion is matched, then the packet is accepted and the rule scan is finished; if criteria
are not matched for any chain the packet is silently dropped
AT#FRWL?
Read command reports the list of all ACCEPT chain rules registered in the Firewall settings in the
format:
#FRWL: <ip_addr>,<net_mask>
#FRWL: <ip_addr>,<net_mask>
...
OK