pvecm: re-add "multiple cluster in same net" section

[pve-docs.git] / pve-firewall-rules-opts.adoc

diff --git a/pve-firewall-rules-opts.adoc b/pve-firewall-rules-opts.adoc
index 0a6361dfd7d36841597d8c849f3bbc94208cd9e3..13ec8d8aa8c4e8a0148a8f26d181376b6c70b44a 100644 (file)
--- a/pve-firewall-rules-opts.adoc
+++ b/pve-firewall-rules-opts.adoc
@@ -1,41 +1,28 @@
-`-dest` `string` ::
+`--dest` `<string>` ::
 
-Restrict packet destination address. This can refer to a single IP address,
-an IP set ('+ipsetname') or an IP alias definition. You can also specify an
-address range like '20.34.101.207-201.3.9.99', or a list of IP addresses
-and networks (entries are separated by comma). Please do not mix IPv4 and
-IPv6 addresses inside such lists.
+Restrict packet destination address. This can refer to a single IP address, an IP set ('+ipsetname') or an IP alias definition. You can also specify an address range like '20.34.101.207-201.3.9.99', or a list of IP addresses and networks (entries are separated by comma). Please do not mix IPv4 and IPv6 addresses inside such lists.
 
-`-dport` `string` ::
+`--dport` `<string>` ::
 
-Restrict TCP/UDP destination port. You can use service names or simple
-numbers (0-65535), as defined in '/etc/services'. Port ranges can be
-specified with '\d+:\d+', for example '80:85', and you can use comma
-separated list to match several ports or ranges.
+Restrict TCP/UDP destination port. You can use service names or simple numbers (0-65535), as defined in '/etc/services'. Port ranges can be specified with '\d+:\d+', for example '80:85', and you can use comma separated list to match several ports or ranges.
 
-`-iface` `string` ::
+`--iface` `<string>` ::
 
-Network interface name. You have to use network configuration key names for
-VMs and containers ('net\d+'). Host related rules can use arbitrary
-strings.
+Network interface name. You have to use network configuration key names for VMs and containers ('net\d+'). Host related rules can use arbitrary strings.
 
-`-proto` `string` ::
+`--log` `<alert | crit | debug | emerg | err | info | nolog | notice | warning>` ::
 
-IP protocol. You can use protocol names ('tcp'/'udp') or simple numbers, as
-defined in '/etc/protocols'.
+Log level for firewall rule.
 
-`-source` `string` ::
+`--proto` `<string>` ::
 
-Restrict packet source address. This can refer to a single IP address, an
-IP set ('+ipsetname') or an IP alias definition. You can also specify an
-address range like '20.34.101.207-201.3.9.99', or a list of IP addresses
-and networks (entries are separated by comma). Please do not mix IPv4 and
-IPv6 addresses inside such lists.
+IP protocol. You can use protocol names ('tcp'/'udp') or simple numbers, as defined in '/etc/protocols'.
 
-`-sport` `string` ::
+`--source` `<string>` ::
 
-Restrict TCP/UDP source port. You can use service names or simple numbers
-(0-65535), as defined in '/etc/services'. Port ranges can be specified with
-'\d+:\d+', for example '80:85', and you can use comma separated list to
-match several ports or ranges.
+Restrict packet source address. This can refer to a single IP address, an IP set ('+ipsetname') or an IP alias definition. You can also specify an address range like '20.34.101.207-201.3.9.99', or a list of IP addresses and networks (entries are separated by comma). Please do not mix IPv4 and IPv6 addresses inside such lists.
+
+`--sport` `<string>` ::
+
+Restrict TCP/UDP source port. You can use service names or simple numbers (0-65535), as defined in '/etc/services'. Port ranges can be specified with '\d+:\d+', for example '80:85', and you can use comma separated list to match several ports or ranges.