Correct firewall configuration doc

In iptables and nftables, the "action" is only "append" or "insert"; in
order to treat the actual packet, it's "jump".

Change-Id: I23f133c711e650bf0fef4fc9f60e3ba2890fd3fa
This commit is contained in:
Cédric Jeanneret 2022-08-10 07:56:28 +02:00
parent eb7bc99438
commit 6a25729de0
1 changed files with 3 additions and 3 deletions

View File

@ -148,7 +148,7 @@ deployment when needed. For example, for Zabbix monitoring system.
dport: 10050
proto: tcp
source: 10.0.0.8
action: accept
jump: accept
Rules can also be used to restrict access. The number used at definition of a
rule will determine where the nftables rule will be inserted. For example,
@ -166,14 +166,14 @@ do.
- 25672
proto: tcp
source: 10.0.0.0/24
action: accept
jump: accept
'099 drop other rabbit access':
dport:
- 4369
- 5672
- 25672
proto: tcp
action: drop
jump: drop
In this example, 098 and 099 are arbitrarily numbers that are smaller than the
default rabbitmq rule number. To know the number of a rule, inspect the active