vyos/vyos-documentation
1
0
Fork 0
mirror of https://github.com/vyos/vyos-documentation.git synced 2025-10-26 01:31:44 +02:00
Code Issues Packages Projects Releases Wiki Activity

firewall: T5729: remove obsolete enable and correct interface name

Browse Source
This commit is contained in:
Nicolas Vollmar 2024-05-10 14:19:25 +02:00 committed by GitHub
parent 4417661f38
commit a2c982709a
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
2 changed files with 12 additions and 12 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
docs/configuration/firewall/ipv4.rst
View File

@ -864,13 +864,13 @@ geoip) to keep database and rules updated.
set firewall ipv4 input filter rule 13 tcp flags not 'fin'
.. cfgcmd:: set firewall ipv4 forward filter rule <1-999999>
state [established | invalid | new | related] [enable | disable]
state [established | invalid | new | related]
.. cfgcmd:: set firewall ipv4 input filter rule <1-999999>
state [established | invalid | new | related] [enable | disable]
state [established | invalid | new | related]
.. cfgcmd:: set firewall ipv4 output filter rule <1-999999>
state [established | invalid | new | related] [enable | disable]
state [established | invalid | new | related]
.. cfgcmd:: set firewall ipv4 name <name> rule <1-999999>
state [established | invalid | new | related] [enable | disable]
state [established | invalid | new | related]
Match against the state of a packet.
@ -985,12 +985,12 @@ Requirements to enable synproxy:
set firewall global-options syn-cookies 'enable'
set firewall ipv4 input filter rule 10 action 'synproxy'
set firewall ipv4 input filter rule 10 destination port '8080'
set firewall ipv4 input filter rule 10 inbound-interface interface-name 'eth1'
set firewall ipv4 input filter rule 10 inbound-interface name 'eth1'
set firewall ipv4 input filter rule 10 protocol 'tcp'
set firewall ipv4 input filter rule 10 synproxy tcp mss '1460'
set firewall ipv4 input filter rule 10 synproxy tcp window-scale '7'
set firewall ipv4 input filter rule 1000 action 'drop'
set firewall ipv4 input filter rule 1000 state invalid 'enable'
set firewall ipv4 input filter rule 1000 state invalid
***********************

12
docs/configuration/firewall/ipv6.rst
View File

@ -850,13 +850,13 @@ geoip) to keep database and rules updated.
set firewall ipv6 input filter rule 13 tcp flags not 'fin'
.. cfgcmd:: set firewall ipv6 forward filter rule <1-999999>
state [established | invalid | new | related] [enable | disable]
state [established | invalid | new | related]
.. cfgcmd:: set firewall ipv6 input filter rule <1-999999>
state [established | invalid | new | related] [enable | disable]
state [established | invalid | new | related]
.. cfgcmd:: set firewall ipv6 output filter rule <1-999999>
state [established | invalid | new | related] [enable | disable]
state [established | invalid | new | related]
.. cfgcmd:: set firewall ipv6 name <name> rule <1-999999>
state [established | invalid | new | related] [enable | disable]
state [established | invalid | new | related]
Match against the state of a packet.
@ -971,12 +971,12 @@ Requirements to enable synproxy:
set firewall global-options syn-cookies 'enable'
set firewall ipv6 input filter rule 10 action 'synproxy'
set firewall ipv6 input filter rule 10 destination port '8080'
set firewall ipv6 input filter rule 10 inbound-interface interface-name 'eth1'
set firewall ipv6 input filter rule 10 inbound-interface name 'eth1'
set firewall ipv6 input filter rule 10 protocol 'tcp'
set firewall ipv6 input filter rule 10 synproxy tcp mss '1460'
set firewall ipv6 input filter rule 10 synproxy tcp window-scale '7'
set firewall ipv6 input filter rule 1000 action 'drop'
set firewall ipv6 input filter rule 1000 state invalid 'enable'
set firewall ipv6 input filter rule 1000 state invalid
***********************
Operation-mode Firewall