pyrox.dev
Merge pull request #30324 from florianjacob/firewall-clarify-logging
nixos/firewall: Rename misleading rejected to refused in logging
authored by Jörg Thalheim and committed by GitHub b90f5086 50a3db12
+4
-4
nixos/modules/services/networking/firewall.nix
+4
-4
nixos/modules/services/networking/firewall.nix
···
95
ip46tables -N nixos-fw-log-refuse
96
97
${optionalString cfg.logRefusedConnections ''
98
-
ip46tables -A nixos-fw-log-refuse -p tcp --syn -j LOG --log-level info --log-prefix "rejected connection: "
99
''}
100
${optionalString (cfg.logRefusedPackets && !cfg.logRefusedUnicastsOnly) ''
101
ip46tables -A nixos-fw-log-refuse -m pkttype --pkt-type broadcast \
102
-
-j LOG --log-level info --log-prefix "rejected broadcast: "
103
ip46tables -A nixos-fw-log-refuse -m pkttype --pkt-type multicast \
104
-
-j LOG --log-level info --log-prefix "rejected multicast: "
105
''}
106
ip46tables -A nixos-fw-log-refuse -m pkttype ! --pkt-type unicast -j nixos-fw-refuse
107
${optionalString cfg.logRefusedPackets ''
108
ip46tables -A nixos-fw-log-refuse \
109
-
-j LOG --log-level info --log-prefix "rejected packet: "
110
''}
111
ip46tables -A nixos-fw-log-refuse -j nixos-fw-refuse
112
···
95
ip46tables -N nixos-fw-log-refuse
96
97
${optionalString cfg.logRefusedConnections ''
98
+
ip46tables -A nixos-fw-log-refuse -p tcp --syn -j LOG --log-level info --log-prefix "refused connection: "
99
''}
100
${optionalString (cfg.logRefusedPackets && !cfg.logRefusedUnicastsOnly) ''
101
ip46tables -A nixos-fw-log-refuse -m pkttype --pkt-type broadcast \
102
+
-j LOG --log-level info --log-prefix "refused broadcast: "
103
ip46tables -A nixos-fw-log-refuse -m pkttype --pkt-type multicast \
104
+
-j LOG --log-level info --log-prefix "refused multicast: "
105
''}
106
ip46tables -A nixos-fw-log-refuse -m pkttype ! --pkt-type unicast -j nixos-fw-refuse
107
${optionalString cfg.logRefusedPackets ''
108
ip46tables -A nixos-fw-log-refuse \
109
+
-j LOG --log-level info --log-prefix "refused packet: "
110
''}
111
ip46tables -A nixos-fw-log-refuse -j nixos-fw-refuse
112