upstream/opnsense-docs
1
0
Fork 0
mirror of https://github.com/opnsense/docs.git synced 2026-05-28 04:02:12 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions

Firewall - make some room for more generic topics and start explaining the different address types.

Browse source
This commit is contained in:
Ad Schellevis 2021-12-01 10:28:00 +01:00
parent 1c95c70b08
commit 11ed8abfde
2 changed files with 30 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
source/firewall.rst
View file

@ -16,6 +16,7 @@ These are all combined in the firewall section.
:maxdepth: 2
:titlesonly:
manual/firewall_generic
manual/aliases
manual/firewall_categories
manual/firewall_groups

29
source/manual/firewall_generic.rst Normal file
View file

@ -0,0 +1,29 @@
===========================
Generic info
===========================
This chapter explains some of the concepts that are being used in different modules of our firewall system and
therefore don't belong to a specific section of this topic.
-----------------------------------------
Address types
-----------------------------------------
When choosing source and or destination addresses, the user can choose several options depending on the context.
To explain what the different options mean when being presented, we will sum them up below:
========================================================================================================================================================
==================================== ==================================================================================================================
Alias Flexible type of network or address definition for easy reuse, expained in
:doc:`aliases </manual/aliases>`
Single host or network Standard host or network in `CIDR notation <https://en.wikipedia.org/wiki/Classless_Inter-Domain_Routing>`__
any All IPv4 and/or IPv6 addresses (in the world)
This Firewall All IPv4 and/or IPv6 addresses assigned to this firewall
[Interface] Network All networks assigned to the physical interface, this will include networks of virtual addresses assigned as well
([Interface] is explained in the :doc:`interfaces </manual/interfaces>` topic). Normally used to allow traffic
from or to clients connected to a specific interface.
[Interface] Address All addresses configured on an interface, this includes all virtual (alias) addresses as well.
Virtual IPs Explicit selection for addresses defined in :doc:`Virtual IPs </manual/firewall_vip>`
==================================== ==================================================================================================================