firewall: correction of default-action for rule-set

This commit is contained in:
srividya0208 2023-08-25 13:59:09 -04:00
parent 0bce1b0cbe
commit b5db744ad6
2 changed files with 6 additions and 5 deletions

View File

@ -78,10 +78,11 @@ Where, main key words and configuration paths that needs to be understood:
.. note:: **Important note about default-actions:**
If default action for any chain is not defined, then the default
action is set to **drop** for that chain.
action is set to **accept** for that chain. Only for custom chains,
the default action is set to **drop**.
Custom firewall chains can be created, with commands
``set firewall [ipv4 | ipv6] [name | ipv6-name] <name> ...``. In Order to use
``set firewall [ipv4 | ipv6] [name | ipv6-name] <name> ...``. In order to use
such custom chain, a rule with **action jump**, and the appropiate **target**
should be defined in a base chain.
@ -1502,4 +1503,4 @@ Update geoip database
.. opcmd:: update geoip
Command used to update GeoIP database and firewall sets.
Command used to update GeoIP database and firewall sets.

View File

@ -3,7 +3,7 @@ Firewall
########
Starting from VyOS 1.4-rolling-202308040557, a new firewall structure
can be found on all vyos instalations. Documentation for most new firewall
can be found on all vyos installations. Documentation for most new firewall
cli can be found here:
.. toctree::
@ -12,7 +12,7 @@ cli can be found here:
general
Also, for those who haven't update to newer version, legacy documentation is
Also, for those who haven't updated to newer version, legacy documentation is
still present and valid for all sagitta version prior to VyOS
1.4-rolling-202308040557: