vyos/vyos-documentation
1
0
Fork 0
mirror of https://github.com/vyos/vyos-documentation.git synced 2025-10-26 08:41:46 +01:00
Code Issues Packages Projects Releases Wiki Activity

T5050: firewall: add log-options in firewall docs

Browse Source
This commit is contained in:
Nicolas Fort 2023-03-17 08:00:58 -03:00
parent cc9a5284d9
commit e56a7c86ec
1 changed files with 27 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

31
docs/configuration/firewall/general.rst
View File

@ -335,13 +335,36 @@ the action of the rule will be executed.
Enable or disable logging for the matched packet.
.. cfgcmd:: set firewall name <name> rule <1-999999> log-level [emerg |
alert | crit | err | warn | notice | info | debug]
.. cfgcmd:: set firewall ipv6-name <name> rule <1-999999> log-level [emerg |
alert | crit | err | warn | notice | info | debug]
.. cfgcmd:: set firewall name <name> rule <1-999999> log-options level
[emerg | alert | crit | err | warn | notice | info | debug]
.. cfgcmd:: set firewall ipv6-name <name> rule <1-999999> log-options level
[emerg | alert | crit | err | warn | notice | info | debug]
Define log-level. Only applicable if rule log is enable.
.. cfgcmd:: set firewall name <name> rule <1-999999> log-options group
<0-65535>
.. cfgcmd:: set firewall ipv6-name <name> rule <1-999999> log-options group
<0-65535>
Define log group to send message to. Only applicable if rule log is enable.
.. cfgcmd:: set firewall name <name> rule <1-999999> log-options snaplen
<0-9000>
.. cfgcmd:: set firewall ipv6-name <name> rule <1-999999> log-options snaplen
<0-9000>
Define length of packet payload to include in netlink message. Only
applicable if rule log is enable and log group is defined.
.. cfgcmd:: set firewall name <name> rule <1-999999> log-options
queue-threshold <0-65535>
.. cfgcmd:: set firewall ipv6-name <name> rule <1-999999> log-options
queue-threshold <0-65535>
Define number of packets to queue inside the kernel before sending them to
userspace. Only applicable if rule log is enable and log group is defined.
.. cfgcmd:: set firewall name <name> rule <1-999999> disable
.. cfgcmd:: set firewall ipv6-name <name> rule <1-999999> disable