From 3f7160d467f7d065795b8f2cf3474eb4e51b102b Mon Sep 17 00:00:00 2001 From: Nicolas Fort Date: Mon, 13 Mar 2023 13:32:26 -0300 Subject: Update missing matcher options in firewall and policy route: packet-length in policy route, queue action and queue options in firewall, and packet-type on both firewall and policy route --- docs/configuration/firewall/general.rst | 25 +++++++++++++++++++++++-- docs/configuration/policy/route.rst | 15 +++++++++++++++ 2 files changed, 38 insertions(+), 2 deletions(-) diff --git a/docs/configuration/firewall/general.rst b/docs/configuration/firewall/general.rst index f2e01e03..9cd747b5 100644 --- a/docs/configuration/firewall/general.rst +++ b/docs/configuration/firewall/general.rst @@ -297,9 +297,9 @@ the action of the rule will be executed. Use this command to enable the logging of the default action. .. cfgcmd:: set firewall name rule <1-999999> action [accept | drop | - jump | reject | return] + jump | queue | reject | return] .. cfgcmd:: set firewall ipv6-name rule <1-999999> action [accept | - drop | jump | reject | return] + drop | jump | queue | reject | return] This required setting defines the action of the current rule. If action is set to ``jump``, then ``jump-target`` is also needed. @@ -310,6 +310,20 @@ the action of the rule will be executed. To be used only when ``action`` is set to ``jump``. Use this command to specify jump target. +.. cfgcmd:: set firewall name rule <1-999999> queue <0-65535> +.. cfgcmd:: set firewall ipv6-name rule <1-999999> queue <0-65535> + + Use this command to set the target to use. Action queue must be defined + to use this setting + +.. cfgcmd:: set firewall name rule <1-999999> queue-options + +.. cfgcmd:: set firewall ipv6-name rule <1-999999> queue-options + + + Options used for queue target. Action queue must be defined to use this + setting + .. cfgcmd:: set firewall name rule <1-999999> description .. cfgcmd:: set firewall ipv6-name rule <1-999999> description @@ -612,6 +626,13 @@ geoip) to keep database and rules updated. Match based on packet length criteria. Multiple values from 1 to 65535 and ranges are supported. +.. cfgcmd:: set firewall name rule <1-999999> packet-type + [broadcast | host | multicast | other] +.. cfgcmd:: set firewall ipv6-name rule <1-999999> packet-type + [broadcast | host | multicast | other] + + Match based on packet type criteria. + .. cfgcmd:: set firewall name rule <1-999999> protocol [ | <0-255> | all | tcp_udp] .. cfgcmd:: set firewall ipv6-name rule <1-999999> protocol [ | diff --git a/docs/configuration/policy/route.rst b/docs/configuration/policy/route.rst index a6330c57..1a85ffc6 100644 --- a/docs/configuration/policy/route.rst +++ b/docs/configuration/policy/route.rst @@ -168,6 +168,21 @@ And for ipv6: ``tcp_udp`` for tcp and udp based packets. The ``!`` negates the selected protocol. +.. cfgcmd:: set policy route rule packet-length +.. cfgcmd:: set policy route6 rule packet-length +.. cfgcmd:: set policy route rule packet-length-exclude +.. cfgcmd:: set policy route6 rule packet-length-exclude + + Match based on packet length criteria. Multiple values from 1 to 65535 + and ranges are supported. + +.. cfgcmd:: set policy route rule packet-type [broadcast | host + | multicast | other] +.. cfgcmd:: set policy route6 rule packet-type [broadcast | host + | multicast | other] + + Match based on packet type criteria. + .. cfgcmd:: set policy route rule recent count <1-255> .. cfgcmd:: set policy route6 rule recent count <1-255> .. cfgcmd:: set policy route rule recent time <1-4294967295> -- cgit v1.2.3