We here at Atomicorp love the command line, so we developed ASL to also be managable from the command line. Anything you can configure or access from the GUI, or can also do from the CLI. This can come in handy if you want to script something ASL does, if you just prefer the command line (like me) or if you ever run into a problem with the GUI.

The key to all of this is the command "asl". It can only be run by root, so if you want to do this make sure you are the root user.

To see what the ASL command line can do, run this command as root:

asl -h

And that will show you all the ASL command line switches.

So lets look at some of things you can do:

asl -ub 1.2.3.4

That lets you unblock an IP address.

asl -dr 12345 --vhost www.example.com

That lets you disable a rule for the vhost www.example.com

asl --reload-firewall

Reloads the ASL firewall rules.

asl -pc

This fixes permissions on ASL directories (in case something or someone has changed them, this will set them back to what they need to be).

And much more. So, if you ever need to do things from the command line with asl, run "asl -h" to see what you can do!

Nice tips, I'll take a look through those as I am more often at CLI than GUI.

Thanks Mike.

I like
asl -bl <IP>
as we often want to blacklist IPs from things going on on the reports. Interestingly, with with ASL 3 GUI when you get the detail of a security event, it shows the attacker's IP and has an option to "whitelist" but not an option to "blacklist". Can you add that easily? We'd love that.

Sure thing, great idea

Can we blacklist multiple IPs with asl -bl, separated with white space or commas or something else? That would be useful.

You sure can, with a white space:
asl -bl 1.2.3.4 4.5.6.7 8.9.10.11