vyos/vyos-documentation
1
0
Fork 0
mirror of https://github.com/vyos/vyos-documentation.git synced 2025-10-26 08:41:46 +01:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #1064 from srividya0208/firewall

Browse Source 
firewall: correction of default-action for rule-set
This commit is contained in:
Robert Göhler 2023-08-26 21:40:15 +02:00 committed by GitHub
commit 1a3aa2dfc4
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 6 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
docs/configuration/firewall/general.rst
View File

@ -78,10 +78,11 @@ Where, main key words and configuration paths that needs to be understood:
.. note:: **Important note about default-actions:** .. note:: **Important note about default-actions:**
If default action for any chain is not defined, then the default If default action for any chain is not defined, then the default
action is set to **drop** for that chain. action is set to **accept** for that chain. Only for custom chains,
the default action is set to **drop**.
Custom firewall chains can be created, with commands Custom firewall chains can be created, with commands
``set firewall [ipv4 | ipv6] [name | ipv6-name] <name> ...``. In Order to use ``set firewall [ipv4 | ipv6] [name | ipv6-name] <name> ...``. In order to use
such custom chain, a rule with **action jump**, and the appropiate **target** such custom chain, a rule with **action jump**, and the appropiate **target**
should be defined in a base chain. should be defined in a base chain.
@ -1502,4 +1503,4 @@ Update geoip database
.. opcmd:: update geoip .. opcmd:: update geoip
Command used to update GeoIP database and firewall sets. Command used to update GeoIP database and firewall sets.

4
docs/configuration/firewall/index.rst
View File

@ -3,7 +3,7 @@ Firewall
######## ########
Starting from VyOS 1.4-rolling-202308040557, a new firewall structure Starting from VyOS 1.4-rolling-202308040557, a new firewall structure
can be found on all vyos instalations. Documentation for most new firewall can be found on all vyos installations. Documentation for most new firewall
cli can be found here: cli can be found here:
.. toctree:: .. toctree::
@ -12,7 +12,7 @@ cli can be found here:
general general
Also, for those who haven't update to newer version, legacy documentation is Also, for those who haven't updated to newer version, legacy documentation is
still present and valid for all sagitta version prior to VyOS still present and valid for all sagitta version prior to VyOS
1.4-rolling-202308040557: 1.4-rolling-202308040557: