Whether to enable Firehol firewall for humans!.
boolean
{
services.firehol.enable = true;
}
{
services.firehol.enable = false;
}
List of interfaces to use
(attribute set of (submodule)) or (list of (attribute set)) convertible to it
{
services.firehol.interfaces = {
eth1 = {
myname = "lan";
};
};
}
{
services.firehol.interfaces = {};
}
submodule
{
services.firehol.interfaces.<name>.dst = {};
}
boolean
{
services.firehol.interfaces.<name>.dst.deny = false;
}
string
{
services.firehol.interfaces.<name>.dst.ip = "";
}
Interface custom name for readability
string
{
services.firehol.interfaces.<name>.myname = "lan";
}
Interface name
string
{
services.firehol.interfaces.<name>.name = "‹name›";
}
Default policy on this interface
one of “accept”, “reject”, “drop”
{
services.firehol.interfaces.<name>.policy = "drop";
}
list of string
{
services.firehol.interfaces.<name>.rules = [
"client all accept"
];
}
submodule
{
services.firehol.interfaces.<name>.src = {};
}
boolean
{
services.firehol.interfaces.<name>.src.deny = false;
}
string
{
services.firehol.interfaces.<name>.src.ip = "";
}
List of Routers to create
(attribute set of (submodule)) or (list of (attribute set)) convertible to it
{
services.firehol.routers = {
lan2wan = {};
};
}
{
services.firehol.routers = {};
}
submodule
{
services.firehol.routers.<name>.dst = {};
}
boolean
{
services.firehol.routers.<name>.dst.deny = false;
}
string
{
services.firehol.routers.<name>.dst.ip = "";
}
Input interface
string
{
services.firehol.routers.<name>.inface = "lan";
}
Router name
string
{
services.firehol.routers.<name>.name = "‹name›";
}
Output interface
string
{
services.firehol.routers.<name>.outface = "";
}
list of string
{
services.firehol.routers.<name>.rules = [
"client all accept"
];
}
submodule
{
services.firehol.routers.<name>.src = {};
}
boolean
{
services.firehol.routers.<name>.src.deny = false;
}
string
{
services.firehol.routers.<name>.src.ip = "";
}