From 30945f39d6d1f0fdba34ce1c2d887a1a6823ecbe Mon Sep 17 00:00:00 2001
From: sarthurdev <965089+sarthurdev@users.noreply.github.com>
Date: Mon, 5 Sep 2022 14:43:08 +0200
Subject: zone-policy: T2199: Migrate zone-policy to firewall node
---
interface-definitions/firewall.xml.in | 137 ++++++++++++++++++++++++++++++++++
1 file changed, 137 insertions(+)
(limited to 'interface-definitions/firewall.xml.in')
diff --git a/interface-definitions/firewall.xml.in b/interface-definitions/firewall.xml.in
index fb24cd558..d39dddc77 100644
--- a/interface-definitions/firewall.xml.in
+++ b/interface-definitions/firewall.xml.in
@@ -742,6 +742,143 @@
disable
+
+
+ Zone-policy
+
+ txt
+ Zone name
+
+
+ [a-zA-Z0-9][\w\-\.]*
+
+
+
+ #include
+ #include
+
+
+ Default-action for traffic coming into this zone
+
+ drop reject
+
+
+ drop
+ Drop silently
+
+
+ reject
+ Drop and notify source
+
+
+ (drop|reject)
+
+
+ drop
+
+
+
+ Zone from which to filter traffic
+
+ zone-policy zone
+
+
+
+
+
+ Firewall options
+
+
+
+
+ IPv6 firewall ruleset
+
+ firewall ipv6-name
+
+
+
+
+
+ IPv4 firewall ruleset
+
+ firewall name
+
+
+
+
+
+
+
+
+
+ Interface associated with zone
+
+ txt
+ Interface associated with zone
+
+
+
+
+
+
+
+
+
+ Intra-zone filtering
+
+
+
+
+ Action for intra-zone traffic
+
+ accept drop
+
+
+ accept
+ Accept traffic
+
+
+ drop
+ Drop silently
+
+
+ (accept|drop)
+
+
+
+
+
+ Use the specified firewall chain
+
+
+
+
+ IPv6 firewall ruleset
+
+ firewall ipv6-name
+
+
+
+
+
+ IPv4 firewall ruleset
+
+ firewall name
+
+
+
+
+
+
+
+
+
+ Zone to be local-zone
+
+
+
+
+
--
cgit v1.2.3