5 option title 'Firewall zones'
6 option package 'firewall'
10 option title 'Name of this firewall zone'
11 option section 'firewall.zone'
16 option title 'Associated network of this firewall zone'
17 option section 'firewall.zone'
18 # option valueof 'network.interface'
19 # option type 'lazylist'
23 option title 'Zone specific action for forwarded traffic'
24 option section 'firewall.zone'
29 option title 'Zone specific action for incoming traffic'
30 option section 'firewall.zone'
35 option title 'Zone specific action for outgoing traffic'
36 option section 'firewall.zone'
41 option title 'Enable masquerading for outgoing zone traffic'
42 option section 'firewall.zone'
43 option datatype 'boolean'
48 option name 'defaults'
49 option title 'Global firewall defaults'
50 option package 'firewall'
56 option title 'Action for forwarded traffic'
57 option section 'firewall.defaults'
62 option title 'Action for incoming traffic'
63 option section 'firewall.defaults'
68 option title 'Action for outgoing traffic'
69 option section 'firewall.defaults'
73 option name 'syn_flood'
74 option title 'Enable syn-flood protection'
75 option section 'firewall.defaults'
76 option datatype 'boolean'
81 option name 'forwarding'
82 option title 'Firewall traffic forwarding rules'
83 option package 'firewall'
87 option title 'Source zone'
88 option section 'firewall.forwarding'
89 option valueof 'firewall.zone.name'
94 option title 'Destination zone'
95 option section 'firewall.forwarding'
96 option valueof 'firewall.zone.name'
103 option title 'Custom rule specification'
104 option package 'firewall'
105 list depends 'target, src'
106 list depends 'target, dest'
110 option title 'Source zone'
111 option section 'firewall.rule'
112 list valueof 'firewall.zone'
113 list valueof 'firewall.zone.network'
117 option title 'Source IP address'
118 option section 'firewall.rule'
119 option datatype 'ipaddr'
122 option name 'src_port'
123 option title 'Source port'
124 option section 'firewall.rule'
125 option datatype 'uint'
128 option name 'src_mac'
129 option title 'Source MAC address'
130 option section 'firewall.rule'
131 option datatype 'macaddr'
135 option title 'Destination zone'
136 option section 'firewall.rule'
137 list valueof 'firewall.zone'
138 list valueof 'firewall.zone.network'
141 option name 'dest_ip'
142 option title 'Destination IP address'
143 option section 'firewall.rule'
144 option datatype 'ipaddr'
147 option name 'dest_port'
148 option title 'Destination port'
149 option section 'firewall.rule'
150 option datatype 'uint'
154 option title 'Protocol'
155 option section 'firewall.rule'
156 option datatype 'string'
160 option title 'Option target'
161 option section 'firewall.rule'
162 option datatype 'string'
168 option name 'redirect'
169 option title 'Traffic redirection rule definition'
170 option package 'firewall'
174 option title 'Source zone'
175 option section 'firewall.redirect'
176 list valueof 'firewall.zone'
177 list valueof 'firewall.zone.network'
181 option title 'Source IP address'
182 option section 'firewall.redirect'
183 option datatype 'ipaddr'
186 option name 'src_port'
187 option title 'Source port'
188 option section 'firewall.redirect'
189 option datatype 'uint'
192 option name 'src_dport'
193 option title 'Source destination port'
194 option section 'firewall.redirect'
195 option datatype 'uint'
198 option name 'src_mac'
199 option title 'Option src_mac'
200 option section 'firewall.redirect'
201 option datatype 'macaddr'
205 option title 'Destination zone'
206 option section 'firewall.redirect'
207 list valueof 'firewall.zone'
208 list valueof 'firewall.zone.network'
211 option name 'dest_ip'
212 option title 'Destination IP address'
213 option section 'firewall.redirect'
214 option datatype 'ipaddr'
217 option name 'dest_port'
218 option title 'Destination port'
219 option section 'firewall.redirect'
220 option datatype 'uint'
224 option title 'Protocol'
225 option section 'firewall.redirect'
226 option datatype 'string'
231 option name 'include'
232 option title 'User defined config includes'
233 option package 'firewall'
237 option title 'Path to the include file'
238 option section 'firewall.include'
239 option datatype 'file'