How to use the Vnx file to extend the filtering feature

The Vnx file extension filtering feature is used to filter settings for file types in the CIFS share level.

Solution:

The vnx file extension filtering function is formed by two components:

1. A set of filter files, named after a special naming convention, that includes the extension and share names to filter. Users need to store these files in the. Filefither directory on the data mover, and if the. FileFilter directory does not have a filter file, filtering is not done.

2, the ACL settings on the filter file. Users can use ACLs to set the exception of filter policies that allow users to restrict file extension filtering for a user.

Note: File extension filtering is performed at the CIFS share level and cannot be completed at the file level within the share. If the file system contains nested shares, the share name used to map the network drive determines the filtering policy that is in effect, and the name does not change at the nested shared boundary.

Creating a filter file

Before restricting certain types of files, you first create a filter file in the. FileFilter directory on the data mover root share (C $). You must create a file for each extended/shared combination that you want to filter. You can use any file editor to create a filter file.

The command rules are as follows:

[@ ][@ ]

= File extension to filter

= The name of the share to which you want to apply the filter. If the share name is not included, the filter applies to all shares on the data mover.

= The NetBIOS name to which you want to limit the filter. If the share is available for multiple NetBIOS names, this name element restricts the filter to a specific NetBIOS name.

For example, to create a filter file for all PowerPoint files on a test file jeffey_fs_01 share, you can create a file named Ppt@jeffey_fs_01.

Some common filter files on the Appendix:

Allfile [@ ][@ ]: This filter file prohibits all file types in the share.

Noext [@ ][@ ]: This filter file will disallow files that are not expanded in the share.

[@ ][@ ]: This filter file identifies the file types allowed on the share.

Control permissions

The user can configure the ACL of the filter file so that any person can perform (or fail to perform) certain actions based on the file type. To do this, you should add Aces for everyone, and then modify the advanced properties to allow or deny specific actions.

For example, you can allow anyone to access the. ppt files on "jeffey_fs_01", but prevent them from deleting the. ppt file from the share. To do this, you can create aces for the "Everyone" filter file and set permissions to "Modify," "Read&execute," "Read," and "Write." You can then deny any person permission to delete under Advanced properties.