| Path : /usr/share/YaST2/modules/ |
| Current File : //usr/share/YaST2/modules/SuSEFirewallCMDLine.ybc |
YaST bytecode 1.4.0 SuSEFirewallCMDLine SuSEFirewallCMDLine.ycp CommandLine SuSEFirewall SuSEFirewallServices SuSEFirewallUI Mode Report String firewall/summary.ycp SuSEFirewallExpertRules
firewall/subdialogs.ycp Label ProductFeatures
expert_ui IsThisExpertConfiguration GetZonesListedItems FirewallInterfaces SetFirewallInterfaceIntoZone AdditionalSettingsForZones Masquerading GetDefinedServicesListedItems AllowedServices ExpertAcceptRules AdditionalServices RedirectToMasqueradedIP AddRedirectToMasqueradedIPRule LoggingLevel BroadcastConfigurationSimple BroadcastReply IPsecSupport IPsecTrustAsZone CustomFirewallRules AddCustomFirewallRule ! HTMLWrong "
BoxSummary # firewall/uifunctions.ycp $ Confirm % PortAliases & Popup ' Address ( Wizard ) IP * Netmask +
PortRanges , firewall/generalfunctions.ycp -
GetPortNumber . GetPortName / firewall/helps.ycp 0 HELPS 1
HelpForDialog 2 all_popup_definition 3 CheckNetwork 4 SetFirewallIcon 5 DisableBackButton 6 SaveAndRestart 7 StartNow 8 StopNow 9 + SetFirewallInterfacesCustomAndChangeButtons : max_length_intname ; RedrawFirewallInterfaces < known_device_names = InitFirewallInterfaces > ' HandlePopupSetFirewallInterfaceIntoZone ? % HandlePopupAdditionalSettingsForZones @ HandleFirewallInterfaces
A ReportWrongPortDefinition B CheckPortNumberDefinition C CheckPortNameDefinition D CheckIfTheyAreAllKnownPorts E ! CheckAdditionalServicesDefinition F HandlePopupAdditionalServices G RedrawAllowedServicesDialog H RedrawAllowedServices I InitAllowedServices J HandleAllowedServices
K SetMasqueradeTableUsable L IsMasqueradingPossible M InitMasquerading N CheckExistency O CheckPort P CheckPortNumber Q CheckIP R UserReadablePortName S " RedrawRedirectToMasqueradedIPTable T ) HandlePopupAddRedirectToMasqueradedIPRule U HandleMasquerading
V HandleRedirectToMasqueradedIP
W InitRedirectToMasqueradedIP X HandlePopupIPsecTrustAsZone Y InitIPsecSupport Z HandleIPsecSupport
[ StoreIPsecSupport \ InitLoggingLevel ] StoreLoggingLevel ^ InitBroadcastConfigurationSimple _ ! StoreBroadcastConfigurationSimple ` firewall_enabled_st a firewall_started_st b InitServiceStartVsStartedStopped c SetEnableFirewall d customrules_current_zone e RedrawCustomRules f InitCustomRules g DeleteSelectedCustomRule h CheckPortNameOrNumber i HandlePopupAddCustomRule j HandleCustomRules
k GetBcastServiceName l GetBcastNetworkName m RedrawBroadcastReplyTable n InitBroadcastReply o service_to_protocol p service_to_port q GetBcastServiceProtocol r GetBcastServicePort s ValidateBroadcastReplyRule t AddAcceptBroadcastReplyRule u HandleBroadcastReply
v show_details w protocol_type_names x li_start y li_end z ul_start { ul_end | SummaryInitCommandLine } SummaryZoneHeader ~ SummaryCheckSpecInterface SummaryInterfacesInZone ShowServiceDetails SummaryOpenServicesInZone SummaryCustomRules SummaryZoneBody SummaryFirewallStart SummaryUnassignedInterfaces InitBoxSummary CommaSeparatedList CheckZone ListFirewallZones
FWCMDZones FWCMDSummary FWCMDStartup FWCMDInterfaces FWCMDLogging FWCMDBroadcast FWCMDServicesList FWCMDServicesShow & FWCMDServicesDefinedServicesManagement & FWCMDServicesAdditionalPortsManagement FWCMDServicesProtect
FWCMDServices FWCMDMasqRedirectShow FWCMDMasqRedirect FWCMDMasquerade cmdline Run
# # , , # / / # 3 WFM Args 3 UI UserInput
OpenDialog CloseDialog ChangeWidget
QueryWidget
ReplaceWidget
SetFocus
Glyph
WidgetExists
3 UI UserInput
OpenDialog CloseDialog ChangeWidget
QueryWidget
ReplaceWidget
SetFocus
Glyph
WidgetExists
0 firewall3 CommandLine Error Print Run 3 SuSEFirewall, Read Write GetKnownFirewallZones IsServiceSupportedInZone GetSpecialInterfacesInZone AddSpecialInterfaceIntoZone max_port_number GetBroadcastAllowedPorts SetBroadcastAllowedPorts GetZoneFullName SetProtectFromInternalZone GetProtectFromInternalZone SetTrustIPsecAs GetTrustIPsecAs GetStartService SetStartService GetEnableService SetEnableService
StartServices StopServices IsStarted GetZoneOfInterface ' GetInterfacesInZoneSupportingAnyFeature GetAllKnownInterfaces RemoveInterfaceFromZone AddInterfaceIntoZone GetInterfacesInZone SetServicesForZones SaveAndRestartService GetAdditionalServices SetAdditionalServices RemoveSpecialInterfaceFromZone
GetMasquerade
SetMasquerade GetListOfForwardsIntoMasquerade RemoveForwardIntoMasqueradeRule AddForwardIntoMasqueradeRule GetLoggingSettings SetLoggingSettings GetIgnoreLoggingBroadcast SetIgnoreLoggingBroadcast GetProtocolTranslatedName GetServicesAcceptRelated SetServicesAcceptRelated 3 SuSEFirewallServices GetNeededTCPPorts ServiceDefinedByPackage & GetFilenameFromServiceDefinedByPackage IsKnownService GetSupportedServices GetNeededUDPPorts GetNeededRPCPorts GetNeededIPProtocols GetDescription GetNeededBroadcastPorts GetNeededPortsAndProtocols 3 SuSEFirewallUI GetShowSummaryDetails simple_text_output 3 Mode commandline normal testsuite 3 Report Error 3 String
EscapeTags TextTable UnderlinedHeader 1 firewall/summary.ycp 0 firewall3 SuSEFirewallExpertRules IsValidNetwork ValidNetwork GetListOfAcceptRules AddNewAcceptRule DeleteRuleID 1 firewall/subdialogs.ycp 0
firewall3 Label AddButton CancelButton OKButton DeleteButton 3 ProductFeatures
GetFeature $
globals ui_mode expert%
-
% items zone_names_to_zones
$! $#
,% foreach zone_id
'& ,) foreach zone_name zone_id
&* add item id -- %2 network_manager dialog
$4 Empty $; Frame Firewall Interfaces firewall VBox Table id table_firewall_interfaces opt notify immediate header Device firewall Interface or String firewall
Configured In firewall HBox
PushButton id change_firewall_interface
&Change... firewall
PushButton id user_defined_firewall_interface
C&ustom... firewall HStretch -V %Y device interface zones
dialog
$Z Frame Zone for Network Interface firewall VBox HBox VBox Left Label Left Label ComboBox id zone_for_interface opt hstretch &Interface Zone firewall VSpacing ButtonBox
PushButton id ok opt okButton default key_F10
PushButton id cancel opt cancelButton key_F9 -q %w zones_additons
user_defined_zones dialog
$x VBox ,z foreach zone_id zone_attributes
&{ add
InputField id + zone_additions_ opt hstretch name items $ Frame ' Additional Interface Settings for Zones firewall VBox HStretch VSpacing VSpacing VSpacing ButtonBox
PushButton id ok opt okButton default key_F10
PushButton id cancel opt cancelButton key_F9 - % dialog
$ Frame Masquerading firewall VBox ReplacePoint id # replacepoint_masquerade_information Empty Left CheckBox id masquerade_networks opt notify &Masquerade Networks firewall- %
services_list translations_to_service_ids
$ $
, foreach
service_id service_name
( 4
,
y2error
+ More services with the same translation: %1 ' , foreach service_name
service_id
& add item id - % dialog
$ VBox Left ComboBox id allowed_services_zone opt notify# All&owed Services for Selected Zone firewall VSpacing HBox VBox opt hstretch Left ReplacePoint id allow_service_names_replacepoint ComboBox id allow_service_names &Service to Allow firewall Table id table_allowed_services opt hstretch vstretch keepSorting header Allowed Service firewall Description firewall VSpacing Left CheckBox id protect_from_internal opt notify$ &Protect Firewall from Internal Zone firewall HSquash VBox VSpacing 1.1
PushButton id add_allowed_service opt hstretch + +
PushButton id remove_allowed_service opt hstretch + + Empty opt vstretch
PushButton id advanced_allowed_service opt hstretch + + A&dvanced... firewall - % dialog
$ VBox Left ComboBox id allowed_services_zone opt notify' Expert Rules Services for Selected Zone firewall VSpacing VBox Table id table_expert_accept_rules header Source Network firewall Protocol firewall Destination Port firewall Source Port firewall HBox
PushButton id add_redirect_to_masquerade
PushButton id remove_redirect_to_masquerade HStretch - % zone_name
dialog
$ HBox MinSize RichText id help_text HSpacing 1.5 Top Frame Additional Allowed Ports firewall VBox HSpacing - VSpacing Left Label
sformat
Settings for Zone: %1 firewall
InputField id additional_tcp opt hstretch
&TCP Ports firewall
InputField id additional_udp opt hstretch
&UDP Ports firewall
InputField id additional_rpc opt hstretch
&RPC Ports firewall
InputField id
additional_ip opt hstretch
&IP Protocols firewall VSpacing ButtonBox
PushButton id ok opt okButton key_F10 default
PushButton id cancel opt cancelButton key_F9 -3 % dialog
$ Frame # Redirect Requests to Masqueraded IP firewall VBox Table id table_redirect_masq header Source Network firewall Protocol firewall Req. IP firewall Req. Port firewall Redir. to IP firewall Redir. to Port firewall HBox
PushButton id add_redirect_to_masquerade
PushButton id remove_redirect_to_masquerade HStretch - % dialog
$ Frame Add Masqueraded Redirect Rule firewall VBox VSpacing Left Label Redirect Matching Rule: firewall HBox VBox ComboBox id add_source_network opt editable hstretch &Source Network firewall item id 0/0 0/0
InputField id add_requested_ip opt hstretch
Re&quested IP firewall VBox ComboBox id add_protocol opt hstretch &Protocol firewall item id tcp TCP item id udp UDP
InputField id add_requested_port opt hstretch R&equested Port firewall VSpacing Left Label Redirection: firewall HBox
InputField id add_redirectto_ip opt hstretch Re&direct to Masqueraded IP firewall
InputField id add_redirectto_port opt hstretch &Redirect to Port firewall VSpacing ButtonBox
PushButton id ok opt okButton default key_F10
PushButton id cancel opt cancelButton key_F9 - % logging_options dialog
$ item id ALL Log All firewall item id CRIT Log Only Critical firewall item id NONE Do Not Log Any firewall$ VBox Frame
Logging Level firewall VBox Left ComboBox id logging_ACCEPT &Logging Accepted Packets firewall Left ComboBox id logging_DROP L&ogging Not Accepted Packets firewall - % dialog
$ Frame Broadcast Configuration firewall ReplacePoint id replace_point_bcast Empty - % dialog
$ VBox Left Label Accepting the Broadcast Reply firewall Table id table_broadcastreply header Zone firewall Service firewall Accepted from Network firewall Left HBox
PushButton id add_br &Add... firewall
PushButton id delete_br &Delete firewall- %? dialog
$@ Frame
IPsec Support firewall HBox Left CheckBox id ispsec_support &Enabled firewall HStretch Right
PushButton id
ipsec_details &Details... firewall-K %N trust_zones dialog
$O add item id no$ Same Zone as Original Source Network firewall$S Frame
IPsec Zone firewall VBox VSpacing Left ComboBox id trust_ipsec_as &Trust IPsec As firewall VSpacing ButtonBox
PushButton id ok opt okButton default key_F10
PushButton id cancel opt cancelButton key_F9 -g %y dialog
$z Frame Custom Allowed Rules firewall VBox Left ComboBox id custom_rules_firewall_zone opt notify Firewall &Zone firewall VSpacing Table id custom_rules_table header Source Network firewall Protocol firewall Destination Port firewall Source Port firewall HBox
PushButton id add_custom_rule
PushButton id remove_custom_rule HStretch - %
- VBox Frame Add New Allowing Rule firewall VBox
InputField id add_source_network opt hstretch Source &Network firewall Left ComboBox id add_protocol &Protocol firewall item id tcp tcp item id udp udp item id _rpc_ _rpc_
InputField id add_destination_port opt hstretch &Destination Port (Optional) firewall
InputField id add_source_port opt hstretch &Source Port (Optional) firewall VSpacing ButtonBox
PushButton id ok opt okButton default key_F10
PushButton id cancel opt cancelButton key_F9 % ! emphasize_string
-
sformat
<font color='#993300'>%1</font> % " dialog
$ VBox RichText id box_summary_richtext Creating summary... firewall VSpacing Left CheckBox id show_details opt notify
&Show Details firewall- 2 firewall/summary.ycp1 firewall/uifunctions.ycp 0
firewall3 Confirm DeleteSelected 3 PortAliases AllowedPortNameOrNumber GetListOfServiceAliases IsKnownPortName
GetPortNumber IsAllowedPortName 3 Popup Error YesNo ContinueCancelHeadline
YesNoHeadline 3 Address Valid4 Check4 3 Wizard RestoreHelp CreateDialog SetTitleIcon 3 IP Check4 3 Netmask Check4 CheckPrefix4 3
PortRanges IsPortRange IsValidPortRange 1 firewall/generalfunctions.ycp 0
firewall% - port_to_be_checked , # , # ( 4 , # ,
y2error
Port name/number must be defined- ( ! regexpmatch ^[0123456789]+$4 port_aliases , # $ & , foreach
port_alias , # , # ( regexpmatch ^[0123456789]+$4 , # & . -% %, . port_to_be_checked , # , # (- 4- , # ,.
y2error
Port name/number must be defined-/ (2 regexpmatch ^[0123456789]+$42 port_aliases , # $3 &5 ,6 foreach
port_alias , # , # (8 ! regexpmatch ^[0123456789]+$48 , # &9 .: -? 2 firewall/uifunctions.ycp1 firewall/helps.ycp 0 firewall$ 0 reading_configurationJ <p><b><big>Reading Firewall Configuration</big></b>
<br>Please wait...</p> firewall saving_configurationI <p><b><big>Saving Firewall Configuration</big></b>
<br>Please wait...</p> firewall firewall-interfaces <p><b><big>Interfaces</big></b>
<br>Here, assign your network devices into firewall zones
by selecting the device in the table and clicking <b>Change</b>.</p>
<p>Enter special strings, like <tt>any</tt>, using
<b>Custom</b>. You can also enter interfaces not yet configured here.
If you need masquerading, the string <tt>any</tt> is not allowed.</p>
<p>Every network device should be assigned to a firewall zone.
Network traffic through any unassigned interface is blocked.</p>
firewall allowed-services + <p><b><big>Allowed Services</big></b>
<br>Here, specify services or ports that should be accessible from the network.
Networks are divided into firewall zones.</p>
<p>To allow a service, select the <b>Zone</b> and the
<b>Service to Allow</b> then press <b>Add</b>.
To remove an allowed service, select the <b>Zone</b> and the <b>Allowed Service</b> then press <b>Delete</b>.</p>
<p>By deselecting <b>Protect Firewall from Internal Zone</b>, remove
protection from the zone. All services and ports would be unprotected from this zone.</p>
firewall <p>Additional settings can be configured using <b>Advanced</b>.
Entries must be separated by a space. There you can allow TCP, UDP, and RPC ports and
IP protocols.</p>
<p>TCP and UDP ports can be entered as port names (<tt>ftp-data</tt>),
port numbers (<tt>3128</tt>), and port ranges (<tt>8000:8520</tt>).
RPC ports must be entered as service names (<tt>portmap</tt> or <tt>nlockmgr</tt>).
Enter IP protocols as the protocol name (<tt>esp</tt>).
</p>
firewall base-masquerading| <p><b><big>Masquerading</big></b>
<br>Masquerading is a function that hides your internal network behind your firewall and allows
your internal network to access the external network, such as the Internet, transparently. Requests
from the external network to the internal one are blocked.
Select <b>Masquerade Networks</b> to masquerade your networks
to the external network.</p>
firewall masquerade-redirect-table_ <p>
Although requests from the external network cannot reach your internal network, it is possible to
transparently redirect any requested ports on your firewall to any internal IP.
To add a new redirect rule, press <b>Add</b> and complete the redirect form.</p>
<p>To removed any redirect rule, select it in the table and press <b>Delete</b>.</p>
firewall simple-broadcast-configuration <p><b><big>Broadcast Configuration</big></b>
<br>Broadcast packets are special UDP packets sent to the whole network to find
neighboring computers or send information to each computer in the network.
For example, CUPS servers provide information about their printing queues using broadcast packets.</p>
<p>SuSEfirewall2 services selected in allowed interfaces automatically add needed broadcast
ports here. To remove any or add any others, edit lists of space-separated ports for
particular zones.</p>
<p>Other dropped broadcast packets are logged. It could be quite a lot of packets in wider networks.
To suppress logging of these packets, deselect <b>Log Not Accepted Broadcast Packets</b>
for the desired zones.</p>
firewall broadcast-reply <p><b><big>Broadcast Reply</big></b><br>
Firewall usually drops packets that are sent by another machines as their reply
to broadcast packets sent by your system, e.g., Samba browsing or SLP browsing.</p>
<p>Here you can configure which packets are allowed to pass through the firewall. Use <b>Add</b>
button to add a new rule. You will have to choose the firewall zone and also choose from
some already defined services or set your rule completely manually.</p>
firewall base-ipsec-support <p><b><big>IPsec Support</big></b>
<br>IPsec is an encrypted communication between trusted hosts or networks through untrusted networks, such as
the Internet. This dialog opens IPsec for an external zone using
<b>Enabled</b>.</p>
<p><b>Details</b> configures how to handle successfully decrypted
IPsec packets. For example, they could be handled as if they were from the internal zone.</p>
firewall base-logging6 <p><b><big>Logging Level</big></b>
<br>This is a base configuration dialog for IP packet logging settings. Here,
configure logging for incoming connection packets. Outgoing ones are not logged at all.</p>
<p>There are two groups of logged IP packets: <b>Accepted Packets</b> and <b>Not Accepted Packets</b>.
You can choose from three levels of logging for each group: <b>Log All</b> for logging every
packet, <b>Log Only Critical</b> for logging only interesting ones, or <b>Do Not Log Any</b>
for no logging. You should log at least critical accepted packets.</p>
firewall box-summary <p><b><big>Summary</big></b>
<br>Here, find a summary of your configuration settings.
This summary is divided into general configuration and parts for each firewall zone.
Every existing zone is summarized here.</p>
<p><b>Firewall Starting</b> shows whether the firewall is started in the
<b>boot process</b> or only <b>manually</b>.</p>
<p>Firewall zones must have a network interface assigned to list the following items in the summary:</p>
<p><b>Interfaces</b>: All interfaces are listed using their configuration name and device name.</p>
<p><b>Open Services, Ports, and Protocols</b>: This lists all allowed network services, additional
TCP (Transmission Control Protocol), UDP (User Datagram Protocol), and RPC (Remote Procedure Call)
ports, and IP (Internet Protocol) protocols.</p>
firewall additional-services + + + + + P <p>Here, enter additional
ports or protocols to enable in the firewall zone.</p> firewall <p><b>TCP Ports</b> and <b>UDP Ports</b> can be entered as
a list of port numbers, port names, or port ranges separated by spaces,
such as <tt>22</tt>, <tt>http</tt>, or <tt>137:139</tt>.</p> firewall <p><b>RPC Ports</b> is a list of RPC services, such as
<tt>nlockmgr</tt>, <tt>ypbind</tt>, or <tt>portmap</tt>, separated by spaces.</p> firewall <p><b>IP Protocols</b> is a list of protocols, such as
<tt>esp</tt>, <tt>smp</tt>, or <tt>chaos</tt>, separated by spaces.
Find the current list of protocols at
http://www.iana.org/assignments/protocol-numbers.</p> firewall <p>The <b>Port Range</b> consists of two colon-separated numbers that represent
all numbers inside the range including the numbers themselves.
The first port number must be lower than the second one,
for example, <tt>200:215</tt>.</p> firewall <p>The <b>Port Name</b> is a name assigned to a port number by the IANA
organization. One port number can have multiple port names assigned. Find
the assignment currently in use in the <tt>/etc/services</tt> file.</p> firewall installation_proposal{ <p><b><big>Firewall</big></b><br />
Firewall is a defensive mechanism that protects your computer from network attacks.</p> firewall custom-rules + + + + <p><b><big>Custom Rules</big></b><br>
Here you can set special firewall rules that allow new connections
matching these rules.</p> firewall <p><b>Source Network</b><br>
Network or IP where the connection comes from,
e.g., <tt>192.168.0.1</tt> or <tt>192.168.0.0/255.255.255.0</tt>
or <tt>192.168.0.0/24</tt> or <tt>0/0</tt> (which means <tt>all</tt>).</p> firewallp <p><b>Protocol</b><br>
Protocol used by that packet. Special protocol <tt>RPC</tt> is used for
RPC services.</p> firewall <p><b>Destination Port</b><br>
Port name, port number or range of ports that are allowed to be
accessed, e.g., <tt>smtp</tt> or <tt>25</tt> or <tt>100:110</tt>.
In case of <tt>RPC</tt> protocol, use the RPC service name.
This entry is optional.</p> firewall <p><b>Source Port</b><br>
Port name, port number or range of ports where the packet
originates from. This entry is optional.</p> firewall custom-rules-popup + + + <p><b>Source Network</b><br>
Network or IP where the connection comes from,
e.g., <tt>192.168.0.1</tt> or <tt>192.168.0.0/255.255.255.0</tt>
or <tt>192.168.0.0/24</tt> or <tt>0/0</tt> (which means <tt>all</tt>).</p> firewallp <p><b>Protocol</b><br>
Protocol used by that packet. Special protocol <tt>RPC</tt> is used for
RPC services.</p> firewall <p><b>Destination Port</b><br>
Port name, port number or range of ports that are allowed to be
accessed, e.g., <tt>smtp</tt> or <tt>25</tt> or <tt>100:110</tt>.
In case of <tt>RPC</tt> protocol, use the RPC service name.
This entry is optional.</p> firewall <p><b>Source Port</b><br>
Port name, port number or range of ports where the packet
originates from. This entry is optional.</p> firewall% 1 identification / # / # - 0
sformat
FIXME: Help for '%1' is missing! firewall 2 firewall/uifunctions.ycp1 firewall/subdialogs.ycp$# 2 opt decorated centered%A 3 network # ret # $B (D || 4D # &E (G 0/04G # &H (K regexpmatch ^[0123456789.]+$4K # &L (O regexpmatch ^[0123456789.]+/[0123456789]+$4O
network_ip network_mask # $P regexpsub ^([0123456789.]+)/[0123456789]+$ \1$Q regexpsub ^[0123456789.]+/([0123456789]+)$ \1&S && (V regexpmatch ^[0123456789.]+/[0123456789.]+$4V
network_ip network_mask # $W regexpsub ! ^([0123456789.]+)/[0123456789.]+$ \1$X regexpsub ! ^[0123456789.]+/([0123456789.]+)$ \1&Z && (] && ! 4] # ,_
sformat
Invalid network definition '%1'.
Network can be defined as an IP or IP with slash and netmask.
For instance: 192.168.0.1
or 192.168.0.0/20
or 192.168.0.0/255.255.255.0
or 0/0 firewall -h %p 4 # ,q
yast-firewall%x 5 key # # ,y 4 ,z id back Enabled % 6 success # , , 1 saving_configuration$ ( , , sleep , - % 7 ret # , Label Starting firewall... firewall, $ , - % 8 ret # , Label Stopping firewall... firewall, $ , - % 9 current_item # # ( & id table_firewall_interfaces CurrentItem ( regexpmatch ^known-.*4 # , id change_firewall_interface Enabled, id user_defined_firewall_interface Enabled4 # , id change_firewall_interface Enabled , id user_defined_firewall_interface Enabled$ : # % ; table_items # $ , foreach interface # zone_name # $ No zone assigned firewall( zone & zone ( && name size name : 4 # ' name + substring name - : ... & add item id + known- id name id , foreach zone # specials zone_name custom_string_text # $ $ $ , foreach special # # &
Custom string firewall& add item id + special- , id table_firewall_interfaces Items , 9 $ <
% = key # # , 4 & <
, foreach known_interface # # ( size name : 4 # ' name + substring name - : ... ' < id name , ; % > interface # zones current_zone ret changed # $ item id No Zone Assigned firewall$ , foreach zone_shortname # # &
add item id ,
2 < $ $ ( ok4 new_zone # $ id zone_for_interface Value( 4 # & ,! ,% (' ,' ; %- ? starting_additionals zones_additons ret changed # $.
$/
,1 foreach zone_shortname # specials # $2 '3 '4 name items mergestring ,:
2 $< $> (? ok4?
events_remove
events_add # $@ $A ,B foreach zone_shortname #
new_additions # $C splitstring id + zone_additions_ Value ,F foreach new_addition_item # # (G && ! contains 4G # &H &I add ,N foreach old_addition_item # # (O && ! contains 4O # &P &Q add ,V foreach adding # # ,W ,Y foreach removing # # ,Z ,^ (` ,` ; %f @ key event # ret event_reason current_item # $g ID $i EventReason SelectionChanged $k id table_firewall_interfaces CurrentItem(o && table_firewall_interfaces Activated4o # (q regexpmatch ^known-4q # &r change_firewall_interface(t regexpmatch ^special-4t # &u user_defined_firewall_interface (z || change_firewall_interface user_defined_firewall_interface4z # (| change_firewall_interface4| # (~ regexpmatch ^known-4~ # , > regexpsub ^known-(.*) \1( regexpmatch ^special-4 # , ? 4 # ,
y2error
Uknown interfaces_item '%1' ( user_defined_firewall_interface4 # , ? ( && table_firewall_interfaces SelectionChanged4 # , 9 - % A port_nr port_definition # port_err # $ ( 4 # &
sformat
Port number %1 is invalid. firewall 4 # &
sformat
+ Port number %1 in definition %2 is invalid. firewall - Invalid Port Definition firewall + +
sformat
A The port number must be in the interval from 1 to %1 (inclusive). firewall % B port_nr port # # ( || 4 # - A tostring 4 # - % C port_name # # ( 4 # - 4 # , - % D ui_id ports # checked # $ , foreach port # # ( ! . ( - ( regexpmatch ^[0123456789]+$4 port_nr # $ tointeger ( && B & & - ( regexpmatch ^[0123456789]+:[0123456789]+$4 port1 port2 port1i port2i # $ regexpsub ^([0123456789]+):[0123456789]+$ \1$ regexpsub ^[0123456789]+:([0123456789]+)$ \1$ tointeger $ tointeger ( ! B & ( ! B & ( && && - ( && ! Invalid Port Range Definition firewall
sformat
Port range %1 is invalid.
It must be defined as the min_port_number:max_port_number and
max_port_number must be bigger than min_port_number. firewall 4 # & - ( ! 4 # ( ! Unknown Port Name firewall
sformat
b Port name %1 is unknown in your current system.
It probably would not work.
Really use this port?
firewall & - ( ! 4 # , id - %$ E services_definition # # (% regexpmatch ,4% ports # $& splitstring ,-' % Invalid Additional Service Definition firewall
sformat
It appears that the additional service settings
%1
are wrong. Entries should be separated by spaces instead of commas,
which are not allowed.
Really use the current settings? firewall -3 %6 F zone # zone_name additional_tcp additional_udp additional_rpc
additional_ip ret ret_value # $7 ,9
2 $< toset TCP $= toset UDP $> toset RPC $? toset IP ,B id additional_tcp Value mergestring ,C id additional_udp Value mergestring ,D id additional_rpc Value mergestring ,E id
additional_ip Value mergestring ,H help_text Value 1 additional-services$J $K )L 4L # &M (O ok4O s_additional_tcp new_additional_tcp s_additional_udp new_additional_udp s_additional_rpc new_additional_rpc s_additional_ip new_additional_ip # $P id additional_tcp Value$Q toset splitstring $S id additional_udp Value$T toset splitstring $V id additional_rpc Value$W toset splitstring $Y id
additional_ip Value$Z toset splitstring (] ! E /] (^ ! E /^ (_ ! E /_ (` ! E /` (c ! D additional_tcp /c (d ! D additional_udp /d ,f TCP ,g UDP ,h RPC ,i IP &k .l (m || cancel cancel4m # &n .o ,s -t %w G current_zone # # (x && INT4x # ,y id allow_service_names Enabled ,z id add_allowed_service Enabled ,{ id table_allowed_services Enabled ,| id remove_allowed_service Enabled ,} id advanced_allowed_service Enabled 4~ # , id allow_service_names Enabled, id add_allowed_service Enabled, id table_allowed_services Enabled, id remove_allowed_service Enabled, id advanced_allowed_service Enabled% H current_zone # allowed_services translations_to_service_ids all_known_services not_allowed_services #
( ! contains 4 # ,
y2error
Unknown zone '%1' - $ $
, foreach
service_id service_name # # ( 4 # ( 4 # &
sformat
%1 (%2) 4 # &
sformat
%1 (%2) ' $ $ ( && INT ! 4 # , foreach service_name
service_id # # & add item id 4 # , foreach service_name
service_id # # ( 4 # & add item id 4 # & add item id & sort x y # tolower a tolower b & sort x y # tolower a tolower b , id table_allowed_services Items , id allow_service_names_replacepoint ComboBox id allow_service_names &Service to Allow firewall , G ( size 4 # , id remove_allowed_service Enabled % I key # init_zone all_currently_known_zones # , 4 ( 4 # , id protect_from_internal Value4 # , id protect_from_internal Value $ EXT$ ( ! contains 4 # & ( 4 # ,
y2error
There are no zones defined!- , H , id allowed_services_zone Value % J key event # ret current_zone # $ ID $ id allowed_services_zone Value( allowed_services_zone4 # , H ( protect_from_internal4 protect_from_internal # $ id protect_from_internal Value, , H ( add_allowed_service4 add_service # $ id allow_service_names Value, , H ( remove_allowed_service4 # ( 4 remove_service # $ id table_allowed_services CurrentItem, , H ( advanced_allowed_service4 # ( F 4 # , H - % K usable # # , id table_redirect_masq Enabled , id add_redirect_to_masquerade Enabled , id remove_redirect_to_masquerade Enabled % L possible has_external has_other # $! $% $& ,( foreach zone # # (* size union -- (/ EXT&/ &0 &3 && -8 %; M key #
masquerade masquerade_possible # ,< 4 $> $? L ,B id masquerade_networks Value ,G K && (K ! 4K # ,M id masquerade_networks Enabled ,O id # replacepoint_masquerade_information Left Label K Masquerading needs at least one external interface and one other interface. firewall -Y %\ N ui_id # # (] id Value 4] # ,^ id ,` This entry must be completed. firewall-a -c %f O ui_id # port # $g id Value(j -j (m ! 4m # ,n id ,o + + Wrong port definition. firewall
-u (y ! D -y -{ % P port_to_be_checked widget_id # port_number # $ - ( 4 # , n Wrong port definition.
No port number found for this port name.
Use the port number instead of the port name.
firewall( && , id - % Q ui_id # ip # $ id Value( ! 4 # , id , + + Invalid IP definition. firewall
- - % R port protocol # # ( - ( - & tolower ( || rpc _rpc_- ( regexpmatch ^[0123456789]+$4 port_name # $ . ( && 4 # &
sformat
%1 (%2) ( ! regexpmatch ^[0123456789]+:[0123456789]+$4 port_number # $ - ( && 4 # &
sformat
%1 (%2) - % S items row_id # $ $ , foreach rule # # ( to_port 4 # ' to_port req_port , foreach key # req_port to_port # ' R protocol & add item id
source_net protocol req_ip req_port BulletArrowRight
forward_to to_port & + , id table_redirect_masq Items % T ret_value # ,
2 , id add_source_network$ ) 4 ret # $ ( || cancel cancel4 # . ( ok4 add_source_network add_requested_ip add_protocol add_requested_port add_redirectto_ip add_redirectto_port # ( ! N add_requested_port/ ( ! N add_source_network/ ( ! N add_redirectto_ip/ ( ! O add_requested_port/ ( ! O add_redirectto_port/ ( ! Q add_redirectto_ip/ $ id add_source_network Value$ id add_requested_ip Value$ id add_protocol Value$ id add_requested_port Value$ id add_redirectto_ip Value$ id add_redirectto_port Value( && 4 # & P add_requested_port( / ( && 4 # & P add_redirectto_port( / , & . , ( , S % U key event # ret # $ ID ( masquerade_networks4
masquerade # $ id masquerade_networks Value, , K -! %$ V key event # ret # $% ID (' add_redirect_to_masquerade4' # ,( T () remove_redirect_to_masquerade4) current_item # $* id table_redirect_masq CurrentItem(+ 4+ # ,, ,- S %2 W key # # ,3 4 ,5 S %8 X
default_value ret # ,9
2 $; ,< id trust_ipsec_as Value $> (@ ok4@ new_value # $A id trust_ipsec_as Value,B ,E %I Y key # supported # ,J 4 $M
service:ipsec EXT(O 4O # ,P
y2error
No such service 'service:ipsec',Q id ispsec_support Enabled 4R # ,S id ispsec_support Enabled,T id ispsec_support Value %X Z key event # ret # $Y ID ([
ipsec_details4[ # ,\ X -_ %b [ key event #
to_support # $c id ispsec_support Value,d ipsec EXT %g \ key # # ,h 4 ,j id logging_ACCEPT Value ACCEPT,k id logging_DROP Value DROP%n ] key event # # ,o ACCEPT id logging_ACCEPT Value,q DROP id logging_DROP Value%u ^ key # replace_dialog allowed_bcast_ports # ,v 4 $x VBox $z ,| foreach zone # zone_name ports_for_zone log_packets # $} $~ mergestring $ no& add HBox HWeight (
InputField id + bcast_ports_ opt hstretch HWeight < VBox Label CheckBox id +
bcast_log_ # &Log Not Accepted Broadcast Packets firewall , id replace_point_bcast % _ key event # allowed_bcast_ports # $
, foreach zone #
allowed_ports log_packets # $ splitstring id + bcast_ports_ Value $ id +
bcast_log_ Value' , no yes, $ ` $ a % b key # # & ` & a % c new_state # curr_running new_running # ( ` 4 # ,
y2milestone
, Enable firewall status preserved (enable=%1) ` - $ $ ( && 4 # ( Firewall automatic starting has been disabled
but firewall is currently running.
Stop the firewall after the new configuration is written? firewall4 # ,
y2milestone
6 User decided to stop the firewall after it is disabled& 4 # ,
y2milestone
: User decided not to stop the firewall after it is disabled& , , ,
y2milestone
I New Settings - Firewall Enabled: %1, Firewall Started: %2 (after Write()) $ d % e current_zone # rules # ( || ! contains 4 # ,
y2error
Unknown zone '%1' - $ ( size 4 counter items # $ $ maplist one_rule # # & + - item id network protocol R dport protocol R sport & sort aa bb # , id custom_rules_table Items , id remove_custom_rule Enabled4 # , id custom_rules_table Items , id remove_custom_rule Enabled % f key # # , 4 ( d 4 # , foreach one_zone # union EXT # ( size & d ( d & d EXT , id custom_rules_firewall_zone Value d , e d % g
selected_zone current_item # # ( 4 # , e , id custom_rules_table SelectedItem %
h port # # ( regexpmatch ^[0123456789]+$4 # -
B tointeger ( ! regexpmatch ^[0123456789]+:[0123456789]+$4 # - C % i
selected_zone # ret_value # ,
2 HBox MinWidth RichText 1 custom-rules-popup , id add_source_network$ )" 4" ret # $# (% || cancel cancel4% # .& (' ok4' add_source_network add_protocol add_destination_port add_source_port # (( ! N add_source_network/( () ! N add_protocol/) $+ id add_source_network Value$, id add_protocol Value$- id add_destination_port Value$. id add_source_port Value(1 || ! 3 41 # ,2 id add_source_network,3 + +
sformat
Invalid network definition '%1' firewall
/4 (8 48 # (9 49 # (: ! 4: # ,; id add_destination_port,<
sformat
Invalid port range '%1' firewall /= (? ! h 4? # ,@ id add_destination_port,A + +
sformat
Invalid port name or number '%1' firewall
/B (G 4G # (H 4H # (I ! 4I # ,J id add_source_port,K
sformat
Invalid port range '%1' firewall /L (N ! h 4N # ,O id add_source_port,P + +
sformat
Invalid port name or number '%1' firewall
/Q ,U network protocol dport sport &_ .` ,d -f %i j key event # ret
selected_zone # $j ID $l id custom_rules_firewall_zone Value(n custom_rules_firewall_zone4n # &o d ,p e (q add_custom_rule4q # (r i 4r # ,s e (u remove_custom_rule4u current_item # $v id custom_rules_table CurrentItem(x && 4x # ,y g -} % k protocol sport # # ( && udp 4 # - All services using UDP firewall( && tcp 4 # - All services using TCP firewall( && udp 4 # - Samba browsing firewall( && udp 4 # - SLP browsing firewall4 # -
sformat
%1/%2 % l network # # ( 0/04 # - All networks firewall4 # -
sformat
Subnet: %1 firewall % m items # $ , foreach zone # ruleset rule_in_ruleset # $ $ , foreach one_rule # rulelist # & + $ splitstring ,& add item id
sformat
%1 %2
sformat
k l 0/0 ( - id table_broadcastreply, id table_broadcastreply Items ( - id delete_br, id delete_br Enabled size % n key # # , m $ o
all-udp udp all-ycp udp samba udp slp udp$ p
all-tcp all-udp samba 137 slp 427% q service # # - o % r service # # - p % s zone network service protocol port # # ( user-defined4 # - ( ! 4 # , id network, + +
sformat
Invalid network definition '%1' firewall
- ( ! 4 # , id port, + +
sformat
Invalid port name or number '%1' firewall
- - % t zones
dialog_ret # $ , foreach zone_shortname # # & add item id EXT, VBox Left ComboBox id zone &Zone firewall Left MinWidth ComboBox id network opt editable &Network firewall 0/0 Left ComboBox id service opt notify &Service firewall item id samba k udp 137 item id slp k udp 427 item id all-udp k udp item id all-tcp k tcp item id user-defined User-defined service firewall HSquash HBox HWeight ComboBox id protocol opt disabled &Protocol firewall item id udp udp item id tcp tcp HWeight
InputField id port opt disabled Po&rt firewall VSpacing ButtonBox
PushButton id ok opt okButton default key_F10
PushButton id cancel opt cancelButton key_F9 $ ) 4 ret # $ ( service4 custom_service # $ id service Value user-defined, id protocol Enabled ,
id port Enabled ( ok4 zone network service protocol port items new_rule #
$
id zone Value$ id network Value$ id service Value$ user-defined id protocol Value q $ user-defined id port Value r ( ! s / $# $$
sformat
%1,%2 (% &%
sformat
%1,%2 && add ,' &* .+ 4, # .- ,1 -3 %6 u key event # ret # $7 ID (9 add_br49 # (: t ,; m (< delete_br4<
current_id # $= id table_broadcastreply Value(> && 4> # (? 4? item_to_delete items item_in_list # $@ splitstring $A $B tointeger -1 'C &D filter one_rule # ,E ,F m 4H # ,I Select an item to delete. firewall -M 2 firewall/summary.ycp$ v $ w TCP TCP Ports firewall UDP UDP Ports firewall RPC RPC Services firewall IP IP Protocols firewall BRD Broadcast Ports firewall$* x <li>$+ y </li>$- z <ul>$. { </ul>%1 | &2 x
* &3 y &4 z &5 { %8 } zone_id (9 49 -:
4; -< + +
<h2>
</h2>
%@ ~ spec_interface zone ret_val $A (C any4C (D EXT4D &E + + + ' ' 7 Any unassigned interface will be assigned to this zone. firewall4M &N + + + ' ' * Currently supported only in external zone. firewall4R &T + + + ' ' Unknown network interface. firewall-W %Z zone_id ret_summary
interfaces interface_id_to_name interfaces_in_zone special_interfaces $[ $] $^
,_ foreach interface '` id name $c $d (f || size size 4f &g + +
Interfaces firewall + + <h3>
Interfaces firewall </h3>
&p + z ,q foreach interface_id &r + + + + + + x +
/
y
,z foreach spec_interface &{ + + + + x ~ y
&~ + { 4 & + + + x $ No interfaces assigned to this zone. firewall y
- %
service_id tcp_ports udp_ports rpc_ports ip_protocols broadcast_ports ret
$ $ $ $ $ $ ( size 4 & maplist tcp_port R TCP& + + + + + + x w TCP : mergestring , y
( size 4 & maplist udp_port R UDP& + + + + + + x w UDP : mergestring , y
( size 4 & + + + + + + x w RPC : mergestring , y
( size 4 & + + + + + + x w IP : mergestring , y
( size 4 & maplist broadcast_port
R UDP& + + + + + + x w BRD :
mergestring , y
( - - + + + +
z {
% zone_id show_details ret_val interfaces_in_zone special_interfaces $ $ $ ( || size size 4 & +
# Open Services, Ports, and Protocols firewall + + <h3># Open Services, Ports, and Protocols firewall </h3>
( && INT ! 4 & + + + + + + z x 2 Internal zone is unprotected. All ports are open. firewall y {
4
open_services translations_to_service_ids $ $
, foreach
service_id service_name ' , foreach service_name
service_id ( 4 & + + + + + + x
: y
, foreach protocol TCP UDP RPC IP additional_services $ mergestring , ( - & + + + + + + x w :
y
& + + + + z + + x Zone has no open ports. firewall y {
- % zone show_details custom_rules rules $ ( 4 ,
y2error
Wrong custom rules for %1 - ( size 4 ,
y2milestone
No custom rules defined- $ + + <h3> Custom Rules firewall </h3>& + z ( ! 4 & + + + x
sformat
%1 custom rules are defined firewall size y 4 , foreach one_rule proto
one_rule_s $ protocol tcp $ + + x
sformat
\ Network: <i>%1</i>, Protocol: <i>%2</i>, Destination port: <i>%3</i>, Source port: <i>%4</i> firewall
network All firewall
protocol All firewall dport
R dport All firewall sport
R sport All firewall y &! + &% + { -' %* zone_id show_details -+ + + + + + + z
{
%3 ret_message $5 + +
Firewall Starting firewall + + <h2> Firewall Starting firewall </h2>
&= + z (@ 4@ &B + + + + x ) <b>Enable</b> firewall automatic starting firewall y
4C &E + + + + x * <b>Disable</b> firewall automatic starting firewall y
(I 4I (K 4K &M + + + + x 4 Firewall starts after the configuration gets written firewall y
4O &Q + + + + x ; Firewall <b>starts</b> after the configuration gets written firewall y
4S (U 4U &W + + + + x B Firewall <b>will be stopped</b> after the configuration is written firewall y
4Y &[ + + + + x : Firewall will not start after the configuration is written firewall y
&_ + + {
-a %d ret_message special_strings interfaces_unassigned
$e + +
Unassigned Interfaces firewall + + <h2> Unassigned Interfaces firewall </h2>
$m ,n foreach zone &o union (s || contains any contains auto4s ,t
y2milestone
6 Special strings 'any' or 'auto' presented, skipping...-u $x &y + + z 9 No network traffic is permitted through these interfaces. firewall,| foreach interface (} zone 4} &~ + + + + + x || name name id
sformat
%1 / %2 name id y
& + & + + {
( - - % for_zones summary & v ,
y2milestone
( Regenerating summary dialog, details: %1 v , id show_details Value v $ + + <hr /> ( size & , foreach zone_id ( contains 4 & + + } v ( && ! 4 , id box_summary_richtext Value - 2 SuSEFirewallCMDLine.ycp1 firewall/generalfunctions.ycp%# comma_separated_string -$ splitstring ,%. zone optional (0 && 40 (2 ! contains 42 ,4
sformat
Unknown zone %1. firewall -5 47 -8 4; (= -= ,@
sformat
Parameter %1 must be set. firewall zone-A %H table_items ,I ,K
Listing Known Firewall Zones: firewall ,L $N ,O foreach zone &P add ,R
Shortcut firewall Zone Name firewall
,] %e options (g list 4g ,h -l %u options for_zone for_zones $y zone $z ({ 4{ (| ! 4| -} 4~ & , ,
Summary: firewall , , - % options ( && atboot manual 4 , Only one parameter is allowed. firewall( atboot 4 , ,
Start-Up: firewall , , ( Enabling firewall in the boot process... firewall, , ( manual 4 , ,
Start-Up: firewall , , * Removing firewall from the boot process... firewall, , ( show 4 , ,
Start-Up: firewall , ( 4 , ' Firewall is enabled in the boot process firewall4 , Firewall needs manual starting firewall, - % options unassigned_interfaces
interfaces for_zone
$ $
, foreach interface ' id ( zone 4 & add id $ zone ( ! - , ( show 4 table_items special_interfaces ,
% Network Interfaces in Firewall Zones: firewall , $ $
, foreach zone ( && - , foreach interface & add name , foreach spec_int & add Special firewall string firewall( && size 4 , foreach interface & add --- name ,
Zone firewall Interface firewall Device Name firewall
( add 4 interface $ interface ( 4 ,
sformat
Parameter %1 must be set. firewall interface- ( 4 ,
sformat
Parameter %1 must be set. firewall zone- (
4 ,
sformat
( Adding special string %1 into zone %2... firewall , 4 ,
sformat
# Adding interface %1 into zone %2... firewall , ( remove 4 interface $
interface ( 4 ,
sformat
Parameter %1 must be set. firewall interface- ( 4 ,
sformat
Parameter %1 must be set. firewall zone- (
4 ,
sformat
* Removing special string %1 from zone %2... firewall , 4 ,
sformat
% Removing interface %1 from zone %2... firewall , , -" %+ options logging_meaning $, ALL Log all firewall CRIT Log only critical firewall NONE Do not log any firewall(5 show 45 log_accepted log_nonaccepted table_items $6 ACCEPT$7 DROP,9 ,;
Global Logging Settings: firewall ,< ,>
Rule Type firewall Value firewall
Logging Level firewall Accepted firewall tolower Software Error Not accepted firewall tolower Software Error
,M ,P
Logging Broadcast Packets: firewall ,Q $S ,T foreach zone &U add yes Logging enabled firewall Logging disabled firewall,a
Short firewall Zone Name firewall Logging Status firewall
,m -o (p set 4p possible_levels $q all crit none(r accepted 4r value $s tolower accepted (t ! contains 4t ,v
sformat
& Value %1 is not allowed for option %2. firewall accepted accepted-w ,y ACCEPT toupper ({ nonaccepted 4{ value $| tolower nonaccepted (} ! contains 4} ,
sformat
& Value %1 is not allowed for option %2. firewall nonaccepted nonaccepted- , DROP toupper ( logbroadcast 4 zones_to_setup zone value $ $ zone ( 4 ( ! 4 - 4 & $ tolower logbroadcast ( ! contains yes no 4 ,
sformat
& Value %1 is not allowed for option %2. firewall logbroadcast logbroadcast- , foreach zone , - % options ( show 4 for_zones zone table_items broadcast_ports $ $ zone ( 4 ( ! 4 - 4 & , ,
Allowed Broadcast Ports: firewall , $ $ , foreach zone zone_name $ , foreach port & add ,
Short firewall Zone Name firewall Port firewall
, - ( && add remove 4 , ( Only one action command is allowed here. firewall- ( || add remove 4 zone todo broadcast_ports
( zone 4 ,
sformat
Parameter %1 must be set. firewall zone- $ zone ( ! 4 - ( port 4 ,
sformat
Parameter %1 must be set. firewall port- $ ( add 4 & add( remove 4 & remove $ , foreach port port ( add4 ' toset add 4 ' filter filter_port , - - % table_items , ,
Defined Firewall Services: firewall $ ,
foreach
service_id service_name & add ,
,
ID firewall Service Name firewall
, % for_zones detailed known_services protect_from_INT detailed_def table_items $ $! $# tcp_ports TCP port firewall udp_ports UDP port firewall rpc_ports RPC port firewall ip_protocols IP protocol firewall,. ,0
Allowed Services in Zones: firewall ,1 $2 ,3 foreach zone (4 ! contains -4 (6 && INT 46 &7 add + + * All services firewall * + + * Entire zone unprotected firewall *-> ,@ foreach
service_id service_name (A 4A &B add (D 4D needed_ports $E ,F foreach short_def tcp_ports udp_ports rpc_ports ip_protocols (G size 4G ,H foreach port ! &I add
sformat
> %1: %2 ! &L add ,T
Zone firewall
Service ID firewall Service Name firewall
,_ ,a
Additional Allowed Ports: firewall ,b &c ,d foreach zone (e ! contains -e (g && INT 4g &h add + + * All ports firewall * + + * Entire zone unprotected firewall *-o ,r foreach protocol TCP UDP RPC ,s foreach port &t add ,x
Zone firewall Protocol firewall Port firewall
, , ,
) Allowed Additional IP Protocols in Zones: firewall , & , foreach zone ( ! contains - ( && INT 4 & add + + * All IP protocols firewall * + + * Entire zone unprotected firewall *- , foreach protocol IP & add ,
Zone firewall IP Protocol firewall
, % action zone services , foreach service ( ! 4 ,
sformat
Unknown service %1. firewall & filter service_item ( add4 , 4 , % action zone ports_or_protocols type types protocol $
ipprotocol IP rpcport RPC tcpport TCP udpport UDP$ ( 4 current $ ( add4 & union 4 & filter
check_item ! contains , 4 ,
y2error
Software error %1 % zone protect & tolower ( ! contains yes no 4 ,
sformat
& Value %1 is not allowed for option %2. firewall protect- ( INT4 , . Protection can only be set for internal zones. firewall- , yes% options ( list 4 , - ( show 4 known_zones for_zone $ $ zone ( 4 ( ! 4 - 4 & ,
detailed - ( && add remove 4 , ( Only one action command is allowed here. firewall( || add remove 4 zone action
count_entries $ zone ( ! - $ add( remove & remove $ , foreach type service tcpport udpport rpcport
ipprotocol items $ ( size 4 & + ( service4 , 4 , (% 4% ,&
sformat
At least one of %1 must be set. firewall, service, tcpport, udpport, rpcport, protocol -, (- protect 4- zone $. zone (/ ! -/ ,1 protect 42 ,3
sformat
0 At least one action command from %1 must be set. firewall list, show, add, remove%@ options table_items records counter ,A ,C
$ Redirect Requests to Masqueraded IP: firewall ,D $F $G $H ,I foreach record &J + (L || to_port to_port 'L to_port req_port (N names 4N ,O foreach key to_port req_port port_name $P . (Q 4Q 'R &V add tostring
source_net protocol req_ip req_port
forward_to to_port ,\
ID firewall Source Network firewall Protocol firewall Req. IP firewall Req. Port firewall Redir. to IP firewall Redir. to Port firewall
,o %x options (y show 4y ,z -{ (| add 4| checked new port_errors $~ , foreach option sourcenet protocol req_port redir_ip ( 4 ,
sformat
Parameter %1 must be set. firewall & ( ! - $
, foreach option sourcenet protocol req_port redir_ip req_ip
redir_port ' ' protocol tolower protocol ( ! contains tcp udp protocol 4 ,
sformat
& Value %1 is not allowed for option %2. firewall protocol protocol- $ , foreach key req_port
redir_port ( 4 port_number $ - ( 4 ' 4 & + +
sformat
Unknown port name %1. firewall ( 4 , - , sourcenet redir_ip protocol req_port
redir_port req_ip - ( remove 4 record ( record 4 ,
sformat
Parameter %1 must be set. firewall record- $ record & - , - % options ( show 4 , ,
Masquerading Settings: firewall , ,
sformat
Masquerading is %1 firewall enabled firewall disabled firewall, - ( enable 4 , ( disable 4 , $ id firewall help Firewall configuration firewall
initialize finish actions startup handler help Start-up settings firewall example startup show startup atboot startup manual zones handler help Known firewall zones firewall example
zones list
interfaces handler help Network interfaces configuration firewall example interfaces show& interfaces add interface=eth0 zone=INT services handler help& Allowed services, ports, and protocols firewall example services show detailed! services set protect=yes zone=INT1 services add service=service:dhcp-server zone=EXT9 services remove ipprotocol=esp tcpport=12,13,ipp zone=DMZ broadcast handler help Broadcast packet settings firewall example# broadcast add zone=INT port=ipp,233
masquerade handler help Masquerading settings firewall example masquerade show masquerade enable masqredirect handler help# Redirect requests to masqueraded IP firewall example masqredirect remove record=6 logging handler help Logging settings firewall example logging set accepted=critical$ logging set logbroadcast=no zone=INT summary handler help Firewall configuration summary firewall example summary summary zone=EXT options show help Show current settings firewall atboot help" Start firewall in the boot process firewall manual help Start firewall manually firewall list help List configured entries firewall zone type string help Zone short name firewall add help Add a new record firewall remove help Remove a record firewall interface type string help$ Network interface configuration name firewall accepted type string help( Logging accepted packets (all|crit|none) firewall nonaccepted type string help, Logging not accepted packets (all|crit|none) firewall logbroadcast type string help" Logging broadcast packets (yes|no) firewall set help Set value firewall port type string help2 Port name or number; comma-separate multiple ports firewall service type string help8 Known firewall service; comma-separate multiple services firewall tcpport type string help6 TCP port name or number; comma-separate multiple ports firewall udpport type string help6 UDP port name or number; comma-separate multiple ports firewall rpcport type string help, RPC port name; comma-separate multiple ports firewall
ipprotocol type string help3 IP protocol name; comma-separate multiple protocols firewall protect type string help Set zone protection (yes|no) firewall detailed help Detailed information firewall enable help
Enable option firewall disable help Disable option firewall sourcenet type string help8 Source network, such as 0/0 or 145.12.35.0/255.255.255.0 firewall protocol type string help Protocol (tcp|udp) firewall req_ip type string help Requested external IP (optional) firewall req_port type string help Requested port name or number firewall redir_ip type string help Redirect to internal IP firewall
redir_port type string help* Redirect to port on internal IP (optional) firewall record type integer help
Record number firewall names help& Use port names instead of port numbers firewall mappings
broadcast show add remove zone port
interfaces show add remove interface zone logging show set accepted nonaccepted logbroadcast zone masqredirect show add remove sourcenet protocol req_ip req_port redir_ip
redir_port record names
masquerade show enable disable services
list show add remove set detailed zone service tcpport udpport rpcport
ipprotocol protect startup show atboot manual summary zone zones list% & ,
y2milestone
( ----------------------------------------,
y2milestone
sformat
' Starting CommandLine with parameters %1 WFM::Args , | , ,
y2milestone
( ----------------------------------------