summaryrefslogtreecommitdiff
path: root/interface-definitions/include/firewall/ipv6-hook-output.xml.i
blob: 9a6d0bb77dd26c16e111f374cad9ad79ed87681b (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
<!-- include start from firewall/ipv6-hook-output.xml.i -->
<node name="output">
  <properties>
    <help>IPv6 output firewall</help>
  </properties>
  <children>
    <node name="filter">
      <properties>
        <help>IPv6 firewall output filter</help>
      </properties>
      <children>
        #include <include/firewall/default-action-base-chains.xml.i>
        #include <include/firewall/default-log.xml.i>
        #include <include/generic-description.xml.i>
        <tagNode name="rule">
          <properties>
            <help>IPv6 Firewall output filter rule number</help>
            <valueHelp>
              <format>u32:1-999999</format>
              <description>Number for this firewall rule</description>
            </valueHelp>
            <constraint>
              <validator name="numeric" argument="--range 1-999999"/>
            </constraint>
            <constraintErrorMessage>Firewall rule number must be between 1 and 999999</constraintErrorMessage>
          </properties>
          <children>
            #include <include/firewall/common-rule-ipv6.xml.i>
            #include <include/firewall/match-ipsec-out.xml.i>
            #include <include/firewall/outbound-interface.xml.i>
            #include <include/firewall/set-packet-modifications-dscp.xml.i>
            #include <include/firewall/set-packet-modifications-conn-mark.xml.i>
            #include <include/firewall/set-packet-modifications-mark.xml.i>
            #include <include/firewall/set-packet-modifications-tcp-mss.xml.i>
            #include <include/firewall/set-packet-modifications-hop-limit.xml.i>
          </children>
        </tagNode>
      </children>
    </node>
        <node name="raw">
      <properties>
        <help>IPv6 firewall output raw</help>
      </properties>
      <children>
        #include <include/firewall/default-action-base-chains.xml.i>
        #include <include/firewall/default-log.xml.i>
        #include <include/generic-description.xml.i>
        <tagNode name="rule">
          <properties>
            <help>IPv6 Firewall output raw rule number</help>
            <valueHelp>
              <format>u32:1-999999</format>
              <description>Number for this firewall rule</description>
            </valueHelp>
            <constraint>
              <validator name="numeric" argument="--range 1-999999"/>
            </constraint>
            <constraintErrorMessage>Firewall rule number must be between 1 and 999999</constraintErrorMessage>
          </properties>
          <children>
            #include <include/firewall/common-rule-ipv6-raw.xml.i>
            #include <include/firewall/match-ipsec-out.xml.i>
            #include <include/firewall/outbound-interface.xml.i>
            #include <include/firewall/set-packet-modifications-dscp.xml.i>
            #include <include/firewall/set-packet-modifications-conn-mark.xml.i>
            #include <include/firewall/set-packet-modifications-mark.xml.i>
            #include <include/firewall/set-packet-modifications-tcp-mss.xml.i>
            #include <include/firewall/set-packet-modifications-hop-limit.xml.i>
          </children>
        </tagNode>
      </children>
    </node>
  </children>
</node>
<!-- include end -->