Skip to content
This repository has been archived by the owner on Jan 24, 2019. It is now read-only.

Set default value of target for zone #16

Closed

Conversation

robinbowes
Copy link

According to the comments, target should have a default value of reject.

Fixes #15

@grawert
Copy link
Contributor

grawert commented Feb 26, 2015

If no target is specified, the attribute should not be set at all. If it is set to '%%REJECT%%' by default, it is not doing the right thing!

From the man page:
"The default target is {chain}ZONE{zone} and will be used if the target is not specified."

Not specifying the target attribute in the xml file is the default.

If the target attribute is set, it must be one of "ACCEPT|%%REJECT%%|DROP". But that means ALL packages matching the zone, will be ACCEPTed, REJECTed, DROPed. No way to specify individual ports or services. That can only be done if target is "{chain}ZONE{zone}".

@xbezdick xbezdick closed this Mar 11, 2015
@robinbowes
Copy link
Author

This still leaves the need for a a fix for #15

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Failed to load zone file INVALID_TARGET
3 participants