diff options
| author | Nephiaust <29741794+Nephiaust@users.noreply.github.com> | 2023-09-18 01:08:00 +0930 |
|---|---|---|
| committer | Nephiaust <29741794+Nephiaust@users.noreply.github.com> | 2023-09-18 01:08:00 +0930 |
| commit | 7d07926f370e16642e8a69b6487459b0de51ade6 (patch) | |
| tree | f206ec54142c525a7798de5c91a7dd8d42be1d02 /docs/configuration/firewall/general.rst | |
| parent | d9a978cf58012c93232bec6fb665130722ace86e (diff) | |
| download | vyos-documentation-7d07926f370e16642e8a69b6487459b0de51ade6.tar.gz vyos-documentation-7d07926f370e16642e8a69b6487459b0de51ade6.zip | |
Added new section about the different firewalls
Updated labels for the pages
Added new pictures.
Signed-off-by: Nephiaust <29741794+Nephiaust@users.noreply.github.com>
Diffstat (limited to 'docs/configuration/firewall/general.rst')
| -rw-r--r-- | docs/configuration/firewall/general.rst | 55 |
1 files changed, 24 insertions, 31 deletions
diff --git a/docs/configuration/firewall/general.rst b/docs/configuration/firewall/general.rst index 0e172a24..df79bd9e 100644 --- a/docs/configuration/firewall/general.rst +++ b/docs/configuration/firewall/general.rst @@ -1,10 +1,10 @@ -:lastproofread: 2021-06-29 +:lastproofread: 2023-09-17 -.. _firewall: +.. _firewall-configuration: -######## -Firewall -######## +###################### +Firewall Configuration +###################### ******** Overview @@ -17,48 +17,41 @@ The firewall supports the creation of groups for addresses, domains, interfaces, mac-addresses, networks and port groups. This groups can be used later in firewall ruleset as desired. -.. note:: **Important note on usage of terms:** - The firewall makes use of the terms `forward`, `input`, and `output` - for firewall policy. More information of Netfilter hooks and Linux - networking packet flows can be found in `Netfilter-Hooks - <https://wiki.nftables.org/wiki-nftables/index.php/Netfilter_hooks>`_ - - Main structure is shown next: .. code-block:: none - set firewall * global-options - + all-ping - + broadcast-ping - + ... + + all-ping + + broadcast-ping + + ... * group - - address-group - - ipv6-address-group - - network-group - - ipv6-network-group - - interface-group - - mac-group - - port-group - - domain-group + - address-group + - ipv6-address-group + - network-group + - ipv6-network-group + - interface-group + - mac-group + - port-group + - domain-group * ipv4 - - forward + - forward + filter - - input + - input + filter - - output + - output + filter - - name + - name + custom_name * ipv6 - - forward + - forward + filter - - input + - input + filter - - output + - output + filter - - ipv6-name + - ipv6-name + custom_name Where, main key words and configuration paths that needs to be understood: |