From c359a5cf7128700cec8d67ba0e683ab4be04baf4 Mon Sep 17 00:00:00 2001 From: Nate Brown Date: Tue, 17 Dec 2019 23:43:10 -0800 Subject: [PATCH] Correct example config doc --- examples/config.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/examples/config.yml b/examples/config.yml index dd3e9df..593b4ab 100644 --- a/examples/config.yml +++ b/examples/config.yml @@ -141,7 +141,7 @@ firewall: # The firewall is default deny. There is no way to write a deny rule. # Rules are comprised of a protocol, port, and one or more of host, group, or CIDR - # Logical evaluation is roughly: port AND proto AND ca_sha AND ca_name AND (host OR group OR groups OR cidr) + # Logical evaluation is roughly: port AND proto AND (ca_sha OR ca_name) AND (host OR group OR groups OR cidr) # - port: Takes `0` or `any` as any, a single number `80`, a range `200-901`, or `fragment` to match second and further fragments of fragmented packets (since there is no port available). # code: same as port but makes more sense when talking about ICMP, TODO: this is not currently implemented in a way that works, use `any` # proto: `any`, `tcp`, `udp`, or `icmp`