


File Formats                                           service(4)



NAME
     service - network service object for SunScreen configuration

DESCRIPTION
     A service object describes  network  protocols  for  use  in
     packet filtering rules. It is manipulated via the configura-
     tion editor or SunScreen administration GUI.

     There are two service sub-types: SINGLE and GROUP.

     The SINGLE service sub-type  describes  a  service  directly
     using the packet filtering state engines of the SunScreen as
     well as necessary ports and modifying parameters.  It  is  a
     collection of FORWARD and REVERSE filters.

     A filter is a set of discriminators associated with a  named
     state engine.  The filter is indicated as being a FORWARD of
     REVERSE filter.

     A discriminator is indicated as a single port or a range  of
     ports  and  as  either  BROADCAST  related  or not BROADCAST
     related. A single port is just a number.  A range  of  ports
     is  #-#,  which  no space before or after the "-" character.
     The keyword PORT or BROADCAST is used to identify  the  type
     of discriminator.

     Optionally, a set of PARAMETERS may immediately  follow  the
     port  or  range of ports they modify.  They are indicated by
     the PARAMETERS keywords and are a  space-separated  list  of
     numbers.

     The GROUP service sub-type describes a service as a  collec-
     tion of other GROUP services and/or other SINGLE services.

     All services may have an optional COMMENT  field  associated
     with  them  which  is  a 256-character or less user-provided
     comment.

     All services may be optionally associated  with  a  specific
     SCREEN  object.   If  a  service is so associated, its value
     will only be used on the Screen with which it is associated.

     A service's unique name which is its  given  name  plus  the
     name  of  the  Screen if it is so associated.  "allowed ser-
     vices" and "allowed services" SCREEN "LA" are  two  examples
     of services name "allowed services".

     All references to services are to its generic name,  without
     regard to any associated Screen.

SEE ALSO
     ssadm-edit(1M), screen(4), stateengine(4), rule(4)



                  Last change: 31 January 2000                  1



