|
723 | 723 | "description": "NAT target (DNAT or SNAT) to use when generating the rule.", |
724 | 724 | "enum": ["DNAT", "SNAT"], |
725 | 725 | "default": "DNAT", |
726 | | - "propertyOrder": 21, |
| 726 | + "propertyOrder": 105, |
727 | 727 | }, |
728 | 728 | } |
729 | 729 |
|
|
882 | 882 | ], |
883 | 883 | }, |
884 | 884 | }, |
| 885 | + "masq_allow_invalid": { |
| 886 | + "type": "boolean", |
| 887 | + "title": "Allow invalid packets.", |
| 888 | + "description": "Do not add DROP INVALID rules to the firewall if masquerading " |
| 889 | + "is used. The DROP rules are supposed to prevent NAT leakage." |
| 890 | + "default": False, |
| 891 | + "format": "checkbox", |
| 892 | + "propertyOrder": 10, |
| 893 | + }, |
| 894 | + "family": {"$ref": "#/definitions/firewall/family"}, |
| 895 | + "log": { |
| 896 | + "type": "integer", |
| 897 | + "title": "Enable logging for the filter and/or mangle table.", |
| 898 | + "description": "Bit field to enable logging in the filter and/or mangle tables, " |
| 899 | + "bit 0 = filter, bit 1 = mangle.", |
| 900 | + "min": 0, |
| 901 | + "max": 3, |
| 902 | + "default": 0, |
| 903 | + "propertyOrder": 10, |
| 904 | + }, |
| 905 | + "log_limit": { |
| 906 | + "type": "string", |
| 907 | + "title": "Limit on the number of log messages.", |
| 908 | + "description": "Limits the amount of log messages per interval. For example, " |
| 909 | + '"10/minute" will limit the logging to 10 messages per minute', |
| 910 | + "default": "10/minute", |
| 911 | + "propertyOrder": 11, |
| 912 | + }, |
| 913 | + "device": { |
| 914 | + "type": "array", |
| 915 | + "title": "Raw devices to attach to this zone." |
| 916 | + "description": "A list of raw device names to associate with this zone. " |
| 917 | + "items": { |
| 918 | + "type": "string", |
| 919 | + "title": "A device to attach to the zone.", |
| 920 | + "description": "A device to attach to the zone." |
| 921 | + 'For example, "ppp+" to match any PPP interface to the zone.', |
| 922 | + }, |
| 923 | + "propertyOrder": 12, |
| 924 | + }, |
885 | 925 | } |
886 | 926 |
|
887 | 927 | firewall_properties = { |
888 | 928 | "syn_flood": { |
889 | 929 | "type": "boolean", |
890 | | - "title": "enable SYN flood protection", |
| 930 | + "title": "SYN flood protection.", |
| 931 | + "description": "Enables SYN flood protection.", |
891 | 932 | "default": False, |
892 | 933 | "format": "checkbox", |
893 | 934 | "propertyOrder": 1, |
|
0 commit comments