Skip to content

Commit 976ecea

Browse files
Add more OpenWRT firewall zone parameters
1 parent f0aac95 commit 976ecea

1 file changed

Lines changed: 43 additions & 2 deletions

File tree

netjsonconfig/backends/openwrt/schema.py

Lines changed: 43 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -723,7 +723,7 @@
723723
"description": "NAT target (DNAT or SNAT) to use when generating the rule.",
724724
"enum": ["DNAT", "SNAT"],
725725
"default": "DNAT",
726-
"propertyOrder": 21,
726+
"propertyOrder": 105,
727727
},
728728
}
729729

@@ -882,12 +882,53 @@
882882
],
883883
},
884884
},
885+
"masq_allow_invalid": {
886+
"type": "boolean",
887+
"title": "Allow invalid packets.",
888+
"description": "Do not add DROP INVALID rules to the firewall if masquerading "
889+
"is used. The DROP rules are supposed to prevent NAT leakage."
890+
"default": False,
891+
"format": "checkbox",
892+
"propertyOrder": 10,
893+
},
894+
"family": {"$ref": "#/definitions/firewall/family"},
895+
"log": {
896+
"type": "integer",
897+
"title": "Enable logging for the filter and/or mangle table.",
898+
"description": "Bit field to enable logging in the filter and/or mangle tables, "
899+
"bit 0 = filter, bit 1 = mangle.",
900+
"min": 0,
901+
"max": 3,
902+
"default": 0,
903+
"propertyOrder": 10,
904+
},
905+
"log_limit": {
906+
"type": "string",
907+
"title": "Limit on the number of log messages.",
908+
"description": "Limits the amount of log messages per interval. For example, "
909+
'"10/minute" will limit the logging to 10 messages per minute',
910+
"default": "10/minute",
911+
"propertyOrder": 11,
912+
},
913+
"device": {
914+
"type": "array",
915+
"title": "Raw devices to attach to this zone."
916+
"description": "A list of raw device names to associate with this zone. "
917+
"items": {
918+
"type": "string",
919+
"title": "A device to attach to the zone.",
920+
"description": "A device to attach to the zone."
921+
'For example, "ppp+" to match any PPP interface to the zone.',
922+
},
923+
"propertyOrder": 12,
924+
},
885925
}
886926

887927
firewall_properties = {
888928
"syn_flood": {
889929
"type": "boolean",
890-
"title": "enable SYN flood protection",
930+
"title": "SYN flood protection.",
931+
"description": "Enables SYN flood protection.",
891932
"default": False,
892933
"format": "checkbox",
893934
"propertyOrder": 1,

0 commit comments

Comments
 (0)