From c74ecbaaccde377653d2a9daa07556f3b8f7cd3e Mon Sep 17 00:00:00 2001 From: Nicolas Fort Date: Fri, 13 Oct 2023 14:12:58 +0000 Subject: T5541: firewall zone: re add firewall zone-base firewall --- interface-definitions/firewall.xml.in | 142 ++++++++++++++++++++++++++++++++++ 1 file changed, 142 insertions(+) (limited to 'interface-definitions') diff --git a/interface-definitions/firewall.xml.in b/interface-definitions/firewall.xml.in index 81e6b89ea..0bb14a1b3 100644 --- a/interface-definitions/firewall.xml.in +++ b/interface-definitions/firewall.xml.in @@ -355,6 +355,148 @@ #include + + + Zone-policy + + txt + Zone name + + + [a-zA-Z0-9][\w\-\.]* + + + + #include + #include + + + Default-action for traffic coming into this zone + + drop reject + + + drop + Drop silently + + + reject + Drop and notify source + + + (drop|reject) + + + drop + + + + Zone from which to filter traffic + + zone-policy zone + + + + + + Firewall options + + + + + IPv6 firewall ruleset + + firewall ipv6 name + + + + + + IPv4 firewall ruleset + + firewall ipv4 name + + + + + + + + + + Interface associated with zone + + txt + Interface associated with zone + + + vrf + VRF associated with zone + + + + vrf name + + + + + + + Intra-zone filtering + + + + + Action for intra-zone traffic + + accept drop + + + accept + Accept traffic + + + drop + Drop silently + + + (accept|drop) + + + + + + Use the specified firewall chain + + + + + IPv6 firewall ruleset + + firewall ipv6 name + + + + + + IPv4 firewall ruleset + + firewall ipv4 name + + + + + + + + + + Zone to be local-zone + + + + + -- cgit v1.2.3