rule move (DNS transparent proxy policy view)

Function

The rule move command changes the priorities of DNS transparent proxy policy rules.

Format

rule move rule-name1{ { after | before } rule-name2 | up | down | top | bottom}

Parameters

Parameter	Description	Value
rule-name1 after rule-name2	Changes the priority of rule-name1 to be lower than that of rule-name2.	The rule-name1 value is the name of an existing DNS transparent proxy policy rule. The rule-name2 value is the name of an existing DNS transparent proxy policy rule.
rule-name1 before rule-name2	Changes the priority of rule-name1 to be higher than that of rule-name2.	The rule-name1 value is the name of an existing DNS transparent proxy policy rule. The rule-name2 value is the name of an existing DNS transparent proxy policy rule.
up	Moves the rule before the upper one.	-
down	Moves the rule after the lower one.	-
top	Moves the rule to the top.	-
bottom	Move a rule to the bottom (before the default policy).	-

Views

Transparent DNS proxy policy rule view

Default Level

2: Configuration level

Usage Guidelines

You can configure multiple DNS transparent proxy policy rules on the FW. The priorities of the rules determine the matching sequence. Rules with higher priorities are matched earlier.

In the DNS transparent proxy policy view, the display this command displays the priorities of the DNS transparent proxy policy rules, and the rule move command changes the priorities of the rules.

Example

# Display the priorities of the DNS transparent proxy policy rules.

<sysname> system-view
[sysname] dns-transparent-policy
[sysname-policy-dns] display this
#                                                                               
dns-transparent-policy                                                          
 rule name abc_01                                                                 
  destination-address 10.1.1.1 32                                               
  action no-tpdns                                                               
 rule name abc_02                                                                
  source-address 10.2.2.2 32                                                    
  action tpdns                                                                  
 rule name abc_03                                                                
  source-address 10.3.3.3 32                                                    
  action tpdns                                                                  
#                                                                               
return

DNS transparent proxy policy rules abc_01, abc_02, and abc_03 are in descending order of their priorities.

# Change the priority of DNS transparent proxy policy rule abc_03 to be higher than that of DNS transparent proxy policy rule abc_02.

[sysname-policy-dns] rule move abc_03 before abc_02
[sysname-policy-dns] display this
#                                                                               
dns-transparent-policy                                                          
 rule name abc_01                                                                 
  destination-address 10.1.1.1 32                                               
  action no-tpdns                                                               
 rule name abc_03                                                                
  source-address 10.3.3.3 32                                                    
  action tpdns                                                                  
 rule name abc_02                                                                
  source-address 10.2.2.2 32                                                    
  action tpdns                                                                  
#                                                                               
return

The priority sequence of the DNS transparent proxy policy rules is abc_01, abc_03, and abc_02 in descending order.