summaryrefslogtreecommitdiff
path: root/templates/firewall/state-policy/invalid
diff options
context:
space:
mode:
Diffstat (limited to 'templates/firewall/state-policy/invalid')
-rw-r--r--templates/firewall/state-policy/invalid/log/node.def3
-rw-r--r--templates/firewall/state-policy/invalid/node.def3
2 files changed, 6 insertions, 0 deletions
diff --git a/templates/firewall/state-policy/invalid/log/node.def b/templates/firewall/state-policy/invalid/log/node.def
index cfd56b3..73a3915 100644
--- a/templates/firewall/state-policy/invalid/log/node.def
+++ b/templates/firewall/state-policy/invalid/log/node.def
@@ -1 +1,4 @@
help: Option to log packets part of an invalid connection
+
+commit:expression: $VAR(./enable) != "";
+ "Need to set 'enable' to log packets part of an invalid connection"
diff --git a/templates/firewall/state-policy/invalid/node.def b/templates/firewall/state-policy/invalid/node.def
index 71bbf20..2495327 100644
--- a/templates/firewall/state-policy/invalid/node.def
+++ b/templates/firewall/state-policy/invalid/node.def
@@ -1 +1,4 @@
help: Global firewall policy for packets part of an invalid connection
+
+commit:expression: $VAR(./action/) != "";
+ "No action set for state 'invalid'"