vzdump: drop overly scary & outdated warning about fleecing

[pve-docs.git] / pve-firewall-rules-opts.adoc

diff --git a/pve-firewall-rules-opts.adoc b/pve-firewall-rules-opts.adoc
index 5d7ba4811de7f2911a30b57aa8ea018752ec099f..21193d2dae2187cacfed994257f5e552ede02185 100644 (file)
--- a/pve-firewall-rules-opts.adoc
+++ b/pve-firewall-rules-opts.adoc
@@ -6,10 +6,18 @@ Restrict packet destination address. This can refer to a single IP address, an I
 
 Restrict TCP/UDP destination port. You can use service names or simple numbers (0-65535), as defined in '/etc/services'. Port ranges can be specified with '\d+:\d+', for example '80:85', and you can use comma separated list to match several ports or ranges.
 
+`--icmp-type` `<string>` ::
+
+Specify icmp-type. Only valid if proto equals 'icmp' or 'icmpv6'/'ipv6-icmp'.
+
 `--iface` `<string>` ::
 
 Network interface name. You have to use network configuration key names for VMs and containers ('net\d+'). Host related rules can use arbitrary strings.
 
+`--log` `<alert | crit | debug | emerg | err | info | nolog | notice | warning>` ::
+
+Log level for firewall rule.
+
 `--proto` `<string>` ::
 
 IP protocol. You can use protocol names ('tcp'/'udp') or simple numbers, as defined in '/etc/protocols'.