diff options
| author | Roberto Bertó <roberto.berto@gmail.com> | 2024-03-10 12:42:31 -0300 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2024-03-10 12:42:31 -0300 |
| commit | 95878ef8c96e276a8bc09b0326878a654ce2ee58 (patch) | |
| tree | ae6fe96cedca2ab2a48f4387cc3aaecc71cb0285 /docs/configuration/firewall/global-options.rst | |
| parent | 0993a91255cad0dd893b7a60e05fd2120a343407 (diff) | |
| parent | 8d410c0843f7d8b88a5a20ccb778ae149c6fc098 (diff) | |
| download | vyos-documentation-95878ef8c96e276a8bc09b0326878a654ce2ee58.tar.gz vyos-documentation-95878ef8c96e276a8bc09b0326878a654ce2ee58.zip | |
Merge pull request #2 from vyos/master
import 2024-03
Diffstat (limited to 'docs/configuration/firewall/global-options.rst')
| -rw-r--r-- | docs/configuration/firewall/global-options.rst | 34 |
1 files changed, 32 insertions, 2 deletions
diff --git a/docs/configuration/firewall/global-options.rst b/docs/configuration/firewall/global-options.rst index 316e0802..b3f311aa 100644 --- a/docs/configuration/firewall/global-options.rst +++ b/docs/configuration/firewall/global-options.rst @@ -1,4 +1,4 @@ -:lastproofread: 2023-11-07 +:lastproofread: 2023-12-26 .. _firewall-global-options-configuration: @@ -114,4 +114,34 @@ Configuration Enable or Disable VyOS to be :rfc:`1337` conform. The following system parameter will be altered: - * ``net.ipv4.tcp_rfc1337``
\ No newline at end of file + * ``net.ipv4.tcp_rfc1337`` + +.. cfgcmd:: set firewall global-options state-policy established action + [accept | drop | reject] + +.. cfgcmd:: set firewall global-options state-policy established log + +.. cfgcmd:: set firewall global-options state-policy established log-level + [emerg | alert | crit | err | warn | notice | info | debug] + + Set the global setting for an established connection. + +.. cfgcmd:: set firewall global-options state-policy invalid action + [accept | drop | reject] + +.. cfgcmd:: set firewall global-options state-policy invalid log + +.. cfgcmd:: set firewall global-options state-policy invalid log-level + [emerg | alert | crit | err | warn | notice | info | debug] + + Set the global setting for invalid packets. + +.. cfgcmd:: set firewall global-options state-policy related action + [accept | drop | reject] + +.. cfgcmd:: set firewall global-options state-policy related log + +.. cfgcmd:: set firewall global-options state-policy related log-level + [emerg | alert | crit | err | warn | notice | info | debug] + + Set the global setting for related connections. |