5
0
mirror of git://git.proxmox.com/git/pve-docs.git synced 2025-01-18 06:03:46 +03:00
pve-docs/pve-firewall-vm-opts.adoc
Thomas Lamprecht 5c1699e5ef update static schema/synopsis definitions
this time *without* pve-network installed for now.

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2019-11-27 18:46:15 +01:00

41 lines
1.1 KiB
Plaintext

`dhcp`: `<boolean>` ('default =' `0`)::
Enable DHCP.
`enable`: `<boolean>` ('default =' `0`)::
Enable/disable firewall rules.
`ipfilter`: `<boolean>` ::
Enable default IP filters. This is equivalent to adding an empty ipfilter-net<id> ipset for every interface. Such ipsets implicitly contain sane default restrictions such as restricting IPv6 link local addresses to the one derived from the interface's MAC address. For containers the configured IP addresses will be implicitly added.
`log_level_in`: `<alert | crit | debug | emerg | err | info | nolog | notice | warning>` ::
Log level for incoming traffic.
`log_level_out`: `<alert | crit | debug | emerg | err | info | nolog | notice | warning>` ::
Log level for outgoing traffic.
`macfilter`: `<boolean>` ('default =' `0`)::
Enable/disable MAC address filter.
`ndp`: `<boolean>` ('default =' `0`)::
Enable NDP (Neighbor Discovery Protocol).
`policy_in`: `<ACCEPT | DROP | REJECT>` ::
Input policy.
`policy_out`: `<ACCEPT | DROP | REJECT>` ::
Output policy.
`radv`: `<boolean>` ::
Allow sending Router Advertisement.