mirror of
https://gitlab.archlinux.org/archlinux/infrastructure.git
synced 2024-05-27 05:26:11 +02:00
Update firewalld.conf
This commit is contained in:
parent
f93b995992
commit
3ef5d11bdf
|
@ -7,10 +7,17 @@ DefaultZone=public
|
|||
|
||||
# Clean up on exit
|
||||
# If set to no or false the firewall configuration will not get cleaned up
|
||||
# on exit or stop of firewalld
|
||||
# on exit or stop of firewalld.
|
||||
# Default: yes
|
||||
CleanupOnExit=yes
|
||||
|
||||
# Clean up kernel modules on exit
|
||||
# If set to yes or true the firewall related kernel modules will be
|
||||
# unloaded on exit or stop of firewalld. This might attempt to unload
|
||||
# modules not originally loaded by firewalld.
|
||||
# Default: no
|
||||
CleanupModulesOnExit=no
|
||||
|
||||
# Lockdown
|
||||
# If set to enabled, firewall changes with the D-Bus interface will be limited
|
||||
# to applications that are listed in the lockdown whitelist.
|
||||
|
@ -45,6 +52,8 @@ LogDenied=off
|
|||
# Choices are:
|
||||
# - nftables (default)
|
||||
# - iptables (iptables, ip6tables, ebtables and ipset)
|
||||
# Note: The iptables backend is deprecated. It will be removed in a future
|
||||
# release.
|
||||
FirewallBackend=nftables
|
||||
|
||||
# FlushAllOnReload
|
||||
|
@ -61,15 +70,3 @@ FlushAllOnReload=yes
|
|||
# internet.
|
||||
# Defaults to "yes".
|
||||
RFC3964_IPv4=yes
|
||||
|
||||
# AllowZoneDrifting
|
||||
# Older versions of firewalld had undocumented behavior known as "zone
|
||||
# drifting". This allowed packets to ingress multiple zones - this is a
|
||||
# violation of zone based firewalls. However, some users rely on this behavior
|
||||
# to have a "catch-all" zone, e.g. the default zone. You can enable this if you
|
||||
# desire such behavior. It's disabled by default for security reasons.
|
||||
# Note: If "yes" packets will only drift from source based zones to interface
|
||||
# based zones (including the default zone). Packets never drift from interface
|
||||
# based zones to other interfaces based zones (including the default zone).
|
||||
# Possible values; "yes", "no". Defaults to "no".
|
||||
AllowZoneDrifting=no
|
||||
|
|
Loading…
Reference in New Issue