summaryrefslogtreecommitdiff
path: root/docs/configuration/firewall/index.rst
AgeCommit message (Collapse)Author
2026-05-06feat: flip swap mechanism — MD as primary, RST as override (Phase 1)Yuriy Andamasov
This is the first of three phases inverting the per-page swap mechanism so MD becomes the canonical primary and RST becomes the rare override. Phase 1 — file renames + conf.py exclude_patterns flip only: - Rename docs/**/md-<stem>.md to docs/**/<stem>.md (drop md- prefix) for all 254 stems previously listed in docs/_swap.txt - Rename docs/**/<stem>.rst to docs/**/rst-<stem>.rst (add rst- prefix) for the same 254 stems - Repurpose docs/_swap.txt as docs/_rst_overrides.txt; initially empty comment-only since no pages need the RST fallback right now - conf.py exclude_patterns flipped: rst-*.rst is now excluded by default instead of md-*.md - conf.py runtime-artifact references updated to _rst_override_state.json and _md_exclude.txt (Phase 2 will rewrite swap_sources.py to produce these names; for now no swap script runs because overrides list is empty) Phase 2 (next commit on this branch) will rewrite scripts/swap_sources.py with inverted rename direction, delete scripts/import_myst.py + tests, and update tests/test_swap_sources.py for the new semantics. Phase 3 will be the cleanup pass and ready-for-review flip. Generated by robots https://vyos.io
2026-04-15merge: resolve CLAUDE.md conflict, keep current branch versionYuriy Andamasov
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-04-15perf: convert all images to WebP with PDF fallbackYuriy Andamasov
Add WebP versions of all 187 PNG/JPG images (38MB → 17MB, 55% reduction). Update RST/MD references to use Sphinx wildcard syntax (.*) so HTML builds use WebP while PDF/LaTeX builds fall back to original PNG/JPG. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-04-10Proofread files in the /configuration/firewall directory (#1810)Quill
* Initial proofread * Edit ipv6.rst * Use cfgcmd command syntax * Fix line length lint errors * Implement feedback
2026-03-30Add TODO markers, fill placeholders, mark stub pages (#1802)Yuriy Andamasov
* chore: add TODO markers for 12 files needing cfgcmd/opcmd conversion Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * fix: fill TBD placeholder in flow-accounting, remove TBD in static routes Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * docs: add stub admonitions to 3 minimal pages Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * fix: replace non-RFC IP addresses and suppress false positives in linter Replace public IPs with RFC 5737 documentation addresses and add stop/start_vyoslinter markers for false positives (MAC addresses, OIDs, NAT64 well-known prefix). Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * fix: replace remaining non-RFC IPs and suppress MAC address false positive - Replace 8.8.8.8 (Google DNS) with 192.0.2.1 (RFC 5737) in: - docs/configexamples/ansible.rst (3 occurrences) - docs/configexamples/nmp.rst (1 occurrence) - docs/automation/terraform/terraformvSphere.rst (1 occurrence) - Wrap SHA-256 certificate fingerprint in openvpn-examples.rst with stop_vyoslinter/start_vyoslinter to suppress false-positive IPv6 flag Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * fix: wrap long lines to comply with 80-char line length limit Wrapped prose content exceeding 80 characters in 9 documentation files. Only RST prose and directive content was modified; code block contents were left untouched as they are exempt from the linter. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * fix: wrap 2 remaining long lines for linter compliance Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * fix: suppress linter for long URL reference in terraformvSphere.rst * fix: address Copilot review suggestions — broken links, typos, YAML indentation - Fix broken inline RST links split across lines in sysctl.rst, eve-ng.rst, oracle.rst (stub notes with VyOS documentation repository link) - Fix YAML indentation in both playbook code blocks in ansible.rst - Fix typo "VyoS" -> "VyOS" in ansible.rst - Fix typo "desition" -> "decision" in terraformvSphere.rst - Fix 4 occurrences of "Terrafom" -> "Terraform" in terraformvSphere.rst - Fix :doc: role split across two lines in openvpn-examples.rst - Wrap long paragraph in openconnect.rst to <=80 chars and remove unnecessary stop/start_vyoslinter markers Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * fix: resolve remaining linter failures — long lines and OID false positive Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * fix: revert 8.8.8.8 replacements, use stop_vyoslinter instead --------- Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>
2024-08-17Firewall: add warning message, saying that during boot, all interfaces are ↵Nicolás Fort
loaded before firewall. (#1524)
2024-08-05Update lastproofread of modified files during previous PR for bridge ↵Nicolas Fort
firewall documenttion; update image which had an error; minor change on documenation
2024-08-02Extend firewall bridge documentationNicolas Fort
2024-07-03proofread and update firewall docswhyrlpool
2024-07-03s/bare/bear across docs, fix typo in proxmox cloud-init docswhyrlpool
2024-07-03Update firewall index.rstwhyrlpool
change "bare in mind" to "bear in mind" re https://www.scribbr.co.uk/definition/bear-in-mind-meaning/
2024-06-12Firewall: Add prerouting informationNicolas Fort
2024-05-04firewall: Corrected spelling mistakesAlex W
2024-04-06Firewall: Fix typo "addtion" -> "addition"Davide Beatrici
2024-01-21minor wording fixes / adjustmentsJames Simpson
2024-01-05fix to add more fixes on top of previous pull requestGiggum
2024-01-05docs: fix to improve readability and correct typos.Giggum
2023-11-27Firewall: Remove <Legacy> firewall documentation from current branch. 1.5 ↵Nicolas Fort
was born with new firewall structure, so no need to include this information.
2023-11-08Firewall Update: improve documentation and split file for better experience ↵Nicolas Fort
while reading. Add brief notes regarding Flowtables and Bridge firewall, leaving a note that those documents are still under development. New explanation for Netfilter based firewall, which includes new diagrams.
2023-11-01Update nat and firewall docs. Re-add zone and update several things.Nicolas Fort
2023-09-18Added new section about the different firewallsNephiaust
Updated labels for the pages Added new pictures. Signed-off-by: Nephiaust <29741794+Nephiaust@users.noreply.github.com>
2023-08-25firewall: correction of default-action for rule-setsrividya0208
2023-08-14Update release version on indexNicolás Fort
2023-06-27T5160: New firewall cli - Update documentation for new firewall structure. ↵Nicolas Fort
Also, keep old/legacy firewall documentation.
2022-09-14firewall: T2199: adjust to new 1.4 CLI syntaxChristian Poessinger
"set zone-policy zone <name>" moved to "set firewall zone <name>".
2022-09-06Firewall. Update matching criteria for firewall rulesNicolas Fort
2022-07-09Firewall: add 'recent' matching criteriaRemi
2022-07-06Firewall: T4299: Add inverse-match to geoipRemi van Dijk | Link-it
2022-06-28Firewall: T4299: add geoip matching criteriaNicolas Fort
2022-06-14Firewall: Add firewall documentationNicolas Fort
2022-05-12Add firewall connection-status nat documentationNicolas Fort
2022-04-24deletion of note related to natsrividya0208
Removed the note from the firewall page as nat grouping is not added yet Added the information about new option 'none' in the site-to-site ipsec vpn page
2022-01-12firewall: T4100: default action numbergoodNETnick
2021-10-11Merge pull request #630 from showipintbri/patch-6Robert Göhler
Update index.rst
2021-10-08interfaces: T3090: add new TCP MSS clamping CLI commandsChristian Poessinger
2021-10-08Update index.rstshowipintbri
2021-10-08Update index.rstshowipintbri
2021-06-29firewall: correct spelling and grammarrebortg
2021-06-11autosectionlabel: add custom headline refrebortg
2021-05-02firewall: typo fix in rule-sets matching criteria pageOguz Yilmaz
2021-04-03Fix typosPaul Thomas
2021-02-14typo fix in documentationDustin Sweigart
2020-12-11firewall: fix lint errorsrebortg
2020-12-07fix build errors after arrangerebortg
2020-11-30arrange services and protocolsrebortg
2020-11-30change include to absolute pathrebortg
2020-11-29arrange firewallrebortg