lucaspalomodevelop/core
1
0
Fork 0
mirror of https://github.com/lucaspalomodevelop/core.git synced 2026-03-13 08:09:41 +00:00
Code Issues Packages Projects Releases Wiki Activity

firewall: remove two sentences via IRC question raised

Browse Source 
The default implies to leave it that way if unsure.  The ominous
warning means nothing without explanation, but the effect is
clear for people wanting to use another setting for direction:

o Egress rules filter on outbound, so half the performance passing
  traffic inwards is already wasted by not dropping it on inbound.

o Egress rules cannot set policy routes since policy routes set
  outbound interface on inbound and thus the decision was already
  made.
This commit is contained in:
Franco Fichtner 2019-09-30 09:28:39 +02:00
parent d2500110ea
commit 6bb03c1806
1 changed files with 2 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
src/www/firewall_rules_edit.php
View File

@ -825,10 +825,8 @@ include("head.inc");
endforeach; ?>
</select>
<div class="hidden" data-for="help_for_direction">
<?=gettext("Direction of the traffic, our default policy is to filter inbound traffic, ".
"which sets the policy to the interface originally receiving the traffic. ".
"If you are not sure, you best leave this setting as is. ".
"There are some remarks when using outbound (egress) filtering.");?>
<?=gettext("Direction of the traffic. The default policy is to filter inbound traffic, ".
"which sets the policy to the interface originally receiving the traffic.") ?>
</div>
</td>
<tr>