kit tips

Это старая версия документа!

---

Для нормального функционирования системы, необходимо правило 1000, иначе не работают внутренние скрипты

set firewall ipv4 input filter default-action 'drop'
set firewall ipv4 input filter rule 1 action 'accept'
set firewall ipv4 input filter rule 1 state 'established'
set firewall ipv4 input filter rule 1 state 'related'
set firewall ipv4 input filter rule 2 action 'accept'
set firewall ipv4 input filter rule 2 source group address-group 'trust'
set firewall ipv4 input filter rule 1000 action 'accept'
set firewall ipv4 input filter rule 1000 destination address '127.0.0.1'
set firewall ipv4 input filter rule 1000 protocol 'all'
set firewall ipv4 input filter rule 1000 source address '127.0.0.1'

Пример настройки FW