Clarification on some statements form firewalld.richlanguage man page

Jiri Popelka jpopelka at redhat.com
Fri Oct 10 15:20:47 UTC 2014


On 10/06/2014 04:28 PM, Rufe Glick wrote:
> On Mon, Oct 6, 2014 at 6:58 AM, Jiri Popelka <jpopelka at redhat.com> wrote:
>> On 10/04/2014 01:31 AM, Rufe Glick wrote:
>>> 2. In the *Action *description the very last line says "Also an action
>>> can be limited using the /limit tag/." What limit tag does the statement
>>> refer to?
>>
>>
>> The limit tag is described in Log.
>
> The thing is that 'limit tag' term is not used in the description of
> the Log element. Please use the 'limit tag' term in the description of
> the Log element at least once. For consistency it'll also be a good
> idea to include that extra option in the description of the Action
> element, like this:
>
> accept | reject [type="reject type"] | drop [limit value="rate/duration"]

Check new version at
https://jpopelka.fedorapeople.org/firewalld/doc/firewalld.richlanguage.html

> For me this rises another question. What does it mean to limit, ...

Let's discuss this in your separate thread.

> An address is either a single IP address, or a network IP address.
> The address has to match the rule family (IPv4/IPv6).
> Subnet mask is expressed in either dot-decimal (x.x.x.x) or prefix
> (/x) notations for IPv4, and in prefix notation (/x) for IPv6 network
> addresses.

Looks good, thank you.

--
Jiri



More information about the firewalld-users mailing list