Remove policy option from man page
Firewall policy is now hardcoded to 'drop'. QubesOS/qubes-issues#2869
This commit is contained in:
parent
080935a6fd
commit
2f1be16635
@ -12,8 +12,6 @@ Synopsis
|
|||||||
|
|
||||||
:command:`qvm-firewall` [-h] [--verbose] [--quiet] [--reload] *VMNAME* list [--raw]
|
:command:`qvm-firewall` [-h] [--verbose] [--quiet] [--reload] *VMNAME* list [--raw]
|
||||||
|
|
||||||
:command:`qvm-firewall` [-h] [--verbose] [--quiet] [--reload] *VMNAME* policy {accept,drop}
|
|
||||||
|
|
||||||
Options
|
Options
|
||||||
-------
|
-------
|
||||||
|
|
||||||
@ -50,8 +48,6 @@ Available actions:
|
|||||||
|
|
||||||
* list - list all the rules for a given VM.
|
* list - list all the rules for a given VM.
|
||||||
|
|
||||||
* policy - set default action if no rule matches.
|
|
||||||
|
|
||||||
|
|
||||||
Rule syntax
|
Rule syntax
|
||||||
-----------
|
-----------
|
||||||
@ -61,8 +57,8 @@ A single rule is built from:
|
|||||||
- zero or more matches
|
- zero or more matches
|
||||||
|
|
||||||
Selected action is applied to packets when all specified matches match,
|
Selected action is applied to packets when all specified matches match,
|
||||||
further rules are not evaluated. If none of the rules match, the default action
|
further rules are not evaluated. If none of the rules match, the default
|
||||||
(``policy``) is applied.
|
firewall policy is ``drop``.
|
||||||
|
|
||||||
Supported matches:
|
Supported matches:
|
||||||
- ``dsthost`` - destination host or network. Can be either IP address in CIDR
|
- ``dsthost`` - destination host or network. Can be either IP address in CIDR
|
||||||
|
Loading…
Reference in New Issue
Block a user