diff options
| author | Christian Breunig <christian@breunig.cc> | 2023-12-16 08:22:15 +0100 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2023-12-16 08:22:15 +0100 |
| commit | 9afd896937ba25dcbc03c6b217e08fcd80494c08 (patch) | |
| tree | 061dc7a5abb02ee75881bcca78b318ce7f7c4ed2 /interface-definitions/include/firewall | |
| parent | af2668c4479377063c2e65e2383648155fb1e8f4 (diff) | |
| parent | 601616c022d938d39eeeab26673f01a6f7238bf3 (diff) | |
| download | vyos-1x-9afd896937ba25dcbc03c6b217e08fcd80494c08.tar.gz vyos-1x-9afd896937ba25dcbc03c6b217e08fcd80494c08.zip | |
Merge pull request #2597 from GurliGebis/T5775-sagitta-backport
T5775: firewall: re-add state-policy to firewall. (manual backport #2539)
Diffstat (limited to 'interface-definitions/include/firewall')
| -rw-r--r-- | interface-definitions/include/firewall/global-options.xml.i | 37 |
1 files changed, 37 insertions, 0 deletions
diff --git a/interface-definitions/include/firewall/global-options.xml.i b/interface-definitions/include/firewall/global-options.xml.i index a63874cb0..3026b54ab 100644 --- a/interface-definitions/include/firewall/global-options.xml.i +++ b/interface-definitions/include/firewall/global-options.xml.i @@ -167,6 +167,43 @@ </properties> <defaultValue>disable</defaultValue> </leafNode> + <node name="state-policy"> + <properties> + <help>Global firewall state-policy</help> + </properties> + <children> + <node name="established"> + <properties> + <help>Global firewall policy for packets part of an established connection</help> + </properties> + <children> + #include <include/firewall/action-accept-drop-reject.xml.i> + #include <include/firewall/log.xml.i> + #include <include/firewall/rule-log-level.xml.i> + </children> + </node> + <node name="invalid"> + <properties> + <help>Global firewall policy for packets part of an invalid connection</help> + </properties> + <children> + #include <include/firewall/action-accept-drop-reject.xml.i> + #include <include/firewall/log.xml.i> + #include <include/firewall/rule-log-level.xml.i> + </children> + </node> + <node name="related"> + <properties> + <help>Global firewall policy for packets part of a related connection</help> + </properties> + <children> + #include <include/firewall/action-accept-drop-reject.xml.i> + #include <include/firewall/log.xml.i> + #include <include/firewall/rule-log-level.xml.i> + </children> + </node> + </children> + </node> <leafNode name="syn-cookies"> <properties> <help>Policy for using TCP SYN cookies with IPv4</help> |