From 3f7160d467f7d065795b8f2cf3474eb4e51b102b Mon Sep 17 00:00:00 2001 From: Nicolas Fort Date: Mon, 13 Mar 2023 13:32:26 -0300 Subject: Update missing matcher options in firewall and policy route: packet-length in policy route, queue action and queue options in firewall, and packet-type on both firewall and policy route --- docs/configuration/firewall/general.rst | 25 +++++++++++++++++++++++-- 1 file changed, 23 insertions(+), 2 deletions(-) (limited to 'docs/configuration/firewall') diff --git a/docs/configuration/firewall/general.rst b/docs/configuration/firewall/general.rst index f2e01e03..9cd747b5 100644 --- a/docs/configuration/firewall/general.rst +++ b/docs/configuration/firewall/general.rst @@ -297,9 +297,9 @@ the action of the rule will be executed. Use this command to enable the logging of the default action. .. cfgcmd:: set firewall name rule <1-999999> action [accept | drop | - jump | reject | return] + jump | queue | reject | return] .. cfgcmd:: set firewall ipv6-name rule <1-999999> action [accept | - drop | jump | reject | return] + drop | jump | queue | reject | return] This required setting defines the action of the current rule. If action is set to ``jump``, then ``jump-target`` is also needed. @@ -310,6 +310,20 @@ the action of the rule will be executed. To be used only when ``action`` is set to ``jump``. Use this command to specify jump target. +.. cfgcmd:: set firewall name rule <1-999999> queue <0-65535> +.. cfgcmd:: set firewall ipv6-name rule <1-999999> queue <0-65535> + + Use this command to set the target to use. Action queue must be defined + to use this setting + +.. cfgcmd:: set firewall name rule <1-999999> queue-options + +.. cfgcmd:: set firewall ipv6-name rule <1-999999> queue-options + + + Options used for queue target. Action queue must be defined to use this + setting + .. cfgcmd:: set firewall name rule <1-999999> description .. cfgcmd:: set firewall ipv6-name rule <1-999999> description @@ -612,6 +626,13 @@ geoip) to keep database and rules updated. Match based on packet length criteria. Multiple values from 1 to 65535 and ranges are supported. +.. cfgcmd:: set firewall name rule <1-999999> packet-type + [broadcast | host | multicast | other] +.. cfgcmd:: set firewall ipv6-name rule <1-999999> packet-type + [broadcast | host | multicast | other] + + Match based on packet type criteria. + .. cfgcmd:: set firewall name rule <1-999999> protocol [ | <0-255> | all | tcp_udp] .. cfgcmd:: set firewall ipv6-name rule <1-999999> protocol [ | -- cgit v1.2.3