diff options
| author | Robert Göhler <github@ghlr.de> | 2024-05-06 21:29:23 +0200 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2024-05-06 21:29:23 +0200 |
| commit | 09e7c9ed0c1650140938dd4f4081b6106633a1cb (patch) | |
| tree | fa15233ff6c7efa5131fcae50a31e45c81f798ee /docs/configexamples/zone-policy.rst | |
| parent | 39a997dd95282c09d5f78478998d6c8be57e0ca3 (diff) | |
| parent | d6019e8c51e7c75be764b2bddb574fba5dd9ab58 (diff) | |
| download | vyos-documentation-09e7c9ed0c1650140938dd4f4081b6106633a1cb.tar.gz vyos-documentation-09e7c9ed0c1650140938dd4f4081b6106633a1cb.zip | |
Merge pull request #1423 from vyos/mergify/bp/sagitta/pr-1422
Modified old option from 'enable-default-log' to new one 'default-log' (backport #1422)
Diffstat (limited to 'docs/configexamples/zone-policy.rst')
| -rw-r--r-- | docs/configexamples/zone-policy.rst | 8 |
1 files changed, 4 insertions, 4 deletions
diff --git a/docs/configexamples/zone-policy.rst b/docs/configexamples/zone-policy.rst index 6f3d75ec..1af8454a 100644 --- a/docs/configexamples/zone-policy.rst +++ b/docs/configexamples/zone-policy.rst @@ -145,7 +145,7 @@ To add logging to the default rule, do: .. code-block:: none - set firewall name <ruleSet> enable-default-log + set firewall name <ruleSet> default-log By default, iptables does not allow traffic for established sessions to @@ -251,7 +251,7 @@ Since we have 4 zones, we need to setup the following rulesets. Dmz-local Even if the two zones will never communicate, it is a good idea to -create the zone-pair-direction rulesets and set enable-default-log. This +create the zone-pair-direction rulesets and set default-log. This will allow you to log attempts to access the networks. Without it, you will never see the connection attempts. @@ -261,7 +261,7 @@ This is an example of the three base rules. name wan-lan { default-action drop - enable-default-log + default-log rule 1 { action accept state { @@ -285,7 +285,7 @@ Here is an example of an IPv6 DMZ-WAN ruleset. ipv6-name dmz-wan-6 { default-action drop - enable-default-log + default-log rule 1 { action accept state { |