4 option title 'Firewall configuration'
8 option title 'Firewall zones'
9 option package 'firewall'
14 option section 'firewall.zone'
19 option title 'Networks belonging to this zone'
20 option section 'firewall.zone'
21 option valueof 'network.interface'
26 option title 'Zone specific action for forwarded traffic'
27 option section 'firewall.zone'
32 option title 'Zone specific action for incoming traffic'
33 option section 'firewall.zone'
38 option title 'Zone specific action for outgoing traffic'
39 option section 'firewall.zone'
44 option title 'Enable masquerading for outgoing zone traffic'
45 option section 'firewall.zone'
46 option datatype 'boolean'
51 option name 'defaults'
52 option title 'Global firewall defaults'
53 option package 'firewall'
59 option title 'Action for forwarded traffic'
60 option section 'firewall.defaults'
65 option title 'Action for incoming traffic'
66 option section 'firewall.defaults'
71 option title 'Action for outgoing traffic'
72 option section 'firewall.defaults'
76 option name 'syn_flood'
77 option title 'Enable syn-flood protection'
78 option section 'firewall.defaults'
79 option datatype 'boolean'
84 option name 'forwarding'
85 option title 'Forwarding rules'
86 option package 'firewall'
90 option title 'Source zone'
91 option section 'firewall.forwarding'
92 option valueof 'firewall.zone.name'
97 option title 'Destination zone'
98 option section 'firewall.forwarding'
99 option valueof 'firewall.zone.name'
106 option title 'Custom rules'
107 option package 'firewall'
108 list depends 'target, src'
109 list depends 'target, dest'
110 list depends 'target, src_ip'
111 list depends 'target, src_port'
112 list depends 'target, src_mac'
113 list depends 'target, dest_ip'
114 list depends 'target, dest_port'
115 list depends 'target, proto'
119 option title 'Source zone'
120 option section 'firewall.rule'
121 option valueof 'firewall.zone.name'
125 option title 'Source IP address'
126 option section 'firewall.rule'
127 option datatype 'ipaddr'
130 option name 'src_port'
131 option title 'Source port'
132 option section 'firewall.rule'
133 option datatype 'portrange'
136 option name 'src_mac'
137 option title 'Source MAC address'
138 option section 'firewall.rule'
139 option datatype 'macaddr'
143 option title 'Destination zone'
144 option section 'firewall.rule'
145 option valueof 'firewall.zone.name'
148 option name 'dest_ip'
149 option title 'Destination IP address'
150 option section 'firewall.rule'
151 option datatype 'ipaddr'
154 option name 'dest_port'
155 option title 'Destination port'
156 option section 'firewall.rule'
157 option datatype 'portrange'
161 option title 'Protocol'
162 option section 'firewall.rule'
163 option datatype 'string'
167 option title 'Option target'
168 option section 'firewall.rule'
169 option datatype 'string'
174 option name 'redirect'
175 option title 'Redirection rules'
176 option package 'firewall'
180 option title 'Source zone'
181 option section 'firewall.redirect'
182 option valueof 'firewall.zone.name'
186 option title 'Source IP address'
187 option section 'firewall.redirect'
188 option datatype 'ipaddr'
191 option name 'src_port'
192 option title 'Source port'
193 option section 'firewall.redirect'
194 option datatype 'portrange'
197 option name 'src_dport'
198 option title 'Source destination port'
199 option section 'firewall.redirect'
200 option datatype 'portrange'
203 option name 'src_mac'
204 option title 'Option src_mac'
205 option section 'firewall.redirect'
206 option datatype 'macaddr'
210 option title 'Destination zone'
211 option section 'firewall.redirect'
212 option valueof 'firewall.zone.name'
215 option name 'dest_ip'
216 option title 'Destination IP address'
217 option section 'firewall.redirect'
218 option datatype 'ipaddr'
221 option name 'dest_port'
222 option title 'Destination port'
223 option section 'firewall.redirect'
224 option datatype 'portrange'
228 option title 'Protocol'
229 option section 'firewall.redirect'
230 option datatype 'string'
235 option name 'include'
236 option title 'User defined config includes'
237 option package 'firewall'
241 option title 'Path to the include file'
242 option section 'firewall.include'
243 option datatype 'file'