* luci/libs/uvl:

[project/luci.git] / libs / uvl / root / lib / uci / schema / default / firewall

diff --git a/libs/uvl/root/lib/uci/schema/default/firewall b/libs/uvl/root/lib/uci/schema/default/firewall
index 494db3fcac18af9b2c799448d366cc5366ecc8e0..fc58705cdee10e73e86559ad75f9908bb25b79cc 100644 (file)
--- a/libs/uvl/root/lib/uci/schema/default/firewall
+++ b/libs/uvl/root/lib/uci/schema/default/firewall
@@ -1,5 +1,49 @@
 package firewall
 
+config section
+       option name     'zone'
+       option title    'Firewall zones'
+       option package  'firewall'
+
+config variable
+       option name     'name'
+       option title    'Name of this firewall zone'
+       option section  'firewall.zone'
+       option required true
+
+config variable
+       option name     'network'
+       option title    'Associated network of this firewall zone'
+       option section  'firewall.zone'
+       option valueof  'network.interface'
+       option multival true
+
+config variable
+       option name     'forward'
+       option title    'Zone specific action for forwarded traffic'
+       option section  'firewall.zone'
+       option required true
+
+config variable
+       option name     'input'
+       option title    'Zone specific action for incoming traffic'
+       option section  'firewall.zone'
+       option required true
+
+config variable
+       option name     'output'
+       option title    'Zone specific action for outgoing traffic'
+       option section  'firewall.zone'
+       option required true
+
+config variable
+       option name     'masq'
+       option title    'Enable masquerading for outgoing zone traffic'
+       option section  'firewall.zone'
+       option datatype 'boolean'
+
+
+
 config section
        option name     'defaults'
        option title    'Global firewall defaults'
@@ -32,6 +76,7 @@ config variable
        option datatype 'boolean'
 
 
+
 config section
        option name     'forwarding'
        option title    'Firewall traffic forwarding rules'
@@ -52,37 +97,139 @@ config variable
        option required true
 
 
+
 config section
-       option name     'zone'
-       option title    'Firewall zones'
+       option name     'rule'
+       option title    'Custom rule specification'
        option package  'firewall'
+       list   depends  'target, src'
+       list   depends  'target, dest'
 
 config variable
-       option name     'name'
-       option title    'Name of this firewall zone'
-       option section  'firewall.zone'
-       option required true
+       option name     'src'
+       option title    'Source zone'
+       option section  'firewall.rule'
+       option valueof  'firewall.zone.name'
 
 config variable
-       option name     'forward'
-       option title    'Zone specific action for forwarded traffic'
-       option section  'firewall.zone'
-       option required true
+       option name     'src_ip'
+       option title    'Source IP address'
+       option section  'firewall.rule'
+       option datatype 'ipaddr'
 
 config variable
-       option name     'input'
-       option title    'Zone specific action for incoming traffic'
-       option section  'firewall.zone'
-       option required true
+       option name     'src_port'
+       option title    'Source port'
+       option section  'firewall.rule'
+       option datatype 'portrange'
 
 config variable
-       option name     'output'
-       option title    'Zone specific action for outgoing traffic'
-       option section  'firewall.zone'
+       option name     'src_mac'
+       option title    'Source MAC address'
+       option section  'firewall.rule'
+       option datatype 'macaddr'
+
+config variable
+       option name     'dest'
+       option title    'Destination zone'
+       option section  'firewall.rule'
+       option valueof  'firewall.zone.name'
+
+config variable
+       option name     'dest_ip'
+       option title    'Destination IP address'
+       option section  'firewall.rule'
+       option datatype 'ipaddr'
+
+config variable
+       option name     'dest_port'
+       option title    'Destination port'
+       option section  'firewall.rule'
+       option datatype 'portrange'
+
+config variable
+       option name     'proto'
+       option title    'Protocol'
+       option section  'firewall.rule'
+       option datatype 'string'
+
+config variable
+       option name     'target'
+       option title    'Option target'
+       option section  'firewall.rule'
+       option datatype 'string'
        option required true
 
+
+
+config section
+       option name     'redirect'
+       option title    'Traffic redirection rule definition'
+       option package  'firewall'
+
 config variable
-       option name     'masq'
-       option title    'Enable masquerading for outgoing zone traffic'
-       option section  'firewall.zone'
-       option datatype 'boolean'
+       option name     'src'
+       option title    'Source zone'
+       option section  'firewall.redirect'
+       option valueof  'firewall.zone.name'
+
+config variable
+       option name     'src_ip'
+       option title    'Source IP address'
+       option section  'firewall.redirect'
+       option datatype 'ipaddr'
+
+config variable
+       option name     'src_port'
+       option title    'Source port'
+       option section  'firewall.redirect'
+       option datatype 'portrange'
+
+config variable
+       option name     'src_dport'
+       option title    'Source destination port'
+       option section  'firewall.redirect'
+       option datatype 'portrange'
+
+config variable
+       option name     'src_mac'
+       option title    'Option src_mac'
+       option section  'firewall.redirect'
+       option datatype 'macaddr'
+
+config variable
+       option name     'dest'
+       option title    'Destination zone'
+       option section  'firewall.redirect'
+       option valueof  'firewall.zone.name'
+
+config variable
+       option name     'dest_ip'
+       option title    'Destination IP address'
+       option section  'firewall.redirect'
+       option datatype 'ipaddr'
+
+config variable
+       option name     'dest_port'
+       option title    'Destination port'
+       option section  'firewall.redirect'
+       option datatype 'portrange'
+
+config variable
+       option name     'proto'
+       option title    'Protocol'
+       option section  'firewall.redirect'
+       option datatype 'string'
+
+
+
+config section
+       option name     'include'
+       option title    'User defined config includes'
+       option package  'firewall'
+
+config variable
+       option name     'path'
+       option title    'Path to the include file'
+       option section  'firewall.include'
+       option datatype 'file'