upstream/opnsense-docs
1
0
Fork 0
mirror of https://github.com/opnsense/docs.git synced 2026-05-28 04:02:12 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions

firewall: Add multiselection hints (#721)

Browse source
This commit is contained in:
Monviech 2025-05-08 13:44:47 +02:00 committed by GitHub
parent b4c4f50227
commit 256a10ea19
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 9 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

10
source/manual/firewall.rst
View file

@ -253,9 +253,13 @@ TCP/IP Version Does this rule apply on IPv4, IPv6 or both
Protocol Protocol to use, most common are TCP and UDP
Source Source network or address, when combining IPv4 and IPv6 in one rule, you can use
aliases which contain both address families.
You can select multiple sources per rule.
Source / Invert Invert source selection (for example not 192.168.0.0/24)
You can only invert single sources.
Destination Destination network or address, like source you can use aliases here as well.
Destination / Invert When the filter should be inverted, you can mark this checkbox
You can select multiple destinations per rule.
Destination / Invert When the filter should be inverted, you can mark this checkbox.
You can only invert single destinations.
Destination port range For TCP and/or UDP you can select a service by name (http, https)
or number (range), you can also use aliases here to simplify management.
Log Create a log entry when this rule applies, you can use
@ -276,6 +280,10 @@ Log Create a log entry when this rule applies,
With the use of the eye button in the right top corner of the screen you can find statistics about the rule in
question (number of evaluations, number of active states and traffic counters).
.. Tip::
You can select multiple sources or destinations per rule, yet keep in mind that a nested alias might be the better choice.
This feature is most useful if you plan to create `security zones </manual/how-tos/security-zones.html>`_.
..........................
Traffic shaping (QoS)