action (file blocking rule view)

Function

The action command configures the action for a file blocking rule.

The undo action command restores the default action for a file blocking rule. The default action is alert.

Format

action { alert | block | qos remark dscp dscp-value }

undo action

Parameters

Parameter	Description	Value
alert	Allows the file transfer and generates an event log.	-
block	Blocks the file transfer and generates an event log.	-
qos remark dscp dscp-value	Allows the file transfer and remark the DSCP values of IP packets.	The value of IP packet can be an integer or a string. That is, the value can be an integer ranging from 0 to 63, or a string of AF11 to AF13, AF21 to AF23, AF31 to AF33, AF41 to AF43, CS1 to CS7, EF, or default.

Views

File blocking rule view

Default Level

2: Configuration level

Usage Guidelines

The default action for a file blocking rule is alert.

Because the device does not support the block action for NFS, if the application is NFS and the action is block, the device will take the alert action.
If the application is IMAP or POP3 and the action is block, the device will delete attachments.

Example

# Set the action for file blocking rule def to block.

<sysname> system-view
[sysname] profile type file-block name abc
[sysname-profile-file-block-abc] rule name def
[sysname-profile-file-block-abc-rule-def] action block