summaryrefslogtreecommitdiff
path: root/templates/firewall
diff options
context:
space:
mode:
authorAn-Cheng Huang <ancheng@vyatta.com>2008-08-21 09:35:43 -0700
committerAn-Cheng Huang <ancheng@vyatta.com>2008-08-21 09:35:43 -0700
commit9dd0ef94bcafa777fa258f5bc96bd5b2ffda6ce6 (patch)
tree93bf29c218f030166ef8646eeb4421202f6afbd3 /templates/firewall
parent9e5e9af8af7479eabd51dec7448d320e97497ecc (diff)
downloadvyatta-cfg-firewall-9dd0ef94bcafa777fa258f5bc96bd5b2ffda6ce6.tar.gz
vyatta-cfg-firewall-9dd0ef94bcafa777fa258f5bc96bd5b2ffda6ce6.zip
fix for bug 3604: add fragment matching options
Diffstat (limited to 'templates/firewall')
-rw-r--r--templates/firewall/name/node.tag/rule/node.tag/fragment/match-frag/node.def1
-rw-r--r--templates/firewall/name/node.tag/rule/node.tag/fragment/match-non-frag/node.def1
-rw-r--r--templates/firewall/name/node.tag/rule/node.tag/fragment/node.def1
3 files changed, 3 insertions, 0 deletions
diff --git a/templates/firewall/name/node.tag/rule/node.tag/fragment/match-frag/node.def b/templates/firewall/name/node.tag/rule/node.tag/fragment/match-frag/node.def
new file mode 100644
index 0000000..75338e3
--- /dev/null
+++ b/templates/firewall/name/node.tag/rule/node.tag/fragment/match-frag/node.def
@@ -0,0 +1 @@
+help: Match second and further fragments of fragmented packets
diff --git a/templates/firewall/name/node.tag/rule/node.tag/fragment/match-non-frag/node.def b/templates/firewall/name/node.tag/rule/node.tag/fragment/match-non-frag/node.def
new file mode 100644
index 0000000..3105271
--- /dev/null
+++ b/templates/firewall/name/node.tag/rule/node.tag/fragment/match-non-frag/node.def
@@ -0,0 +1 @@
+help: Match head fragments or unfragmented packets
diff --git a/templates/firewall/name/node.tag/rule/node.tag/fragment/node.def b/templates/firewall/name/node.tag/rule/node.tag/fragment/node.def
new file mode 100644
index 0000000..c532d49
--- /dev/null
+++ b/templates/firewall/name/node.tag/rule/node.tag/fragment/node.def
@@ -0,0 +1 @@
+help: Set IP fragment matching