Units
Translation components API.
See the Weblate's Web API documentation for detailed description of the API.
GET /api/translations/documentation/bookshandbookfirewalls_index/fr_FR/units/?format=api&page=11
{ "count": 711, "next": "https://translate-dev.freebsd.org/api/translations/documentation/bookshandbookfirewalls_index/fr_FR/units/?format=api&page=12", "previous": "https://translate-dev.freebsd.org/api/translations/documentation/bookshandbookfirewalls_index/fr_FR/units/?format=api&page=10", "results": [ { "translation": "https://translate-dev.freebsd.org/api/translations/documentation/bookshandbookfirewalls_index/fr_FR/?format=api", "source": [ "PF allows filtering on all variations of ICMP types and codes. The list of possible types and codes are documented in man:icmp[4] and man:icmp6[4]." ], "previous_source": "", "target": [ "" ], "id_hash": -3589721527290687970, "content_hash": -3589721527290687970, "location": "documentation/content/en/books/handbook/firewalls/_index.adoc:650", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 172, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 24, "source_unit": "https://translate-dev.freebsd.org/api/units/1219784/?format=api", "priority": 100, "id": 1220708, "web_url": "https://translate-dev.freebsd.org/translate/documentation/bookshandbookfirewalls_index/fr_FR/?checksum=4e2ebf4a43440e1e", "url": "https://translate-dev.freebsd.org/api/units/1220708/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2021-06-08T13:13:09.171072Z" }, { "translation": "https://translate-dev.freebsd.org/api/translations/documentation/bookshandbookfirewalls_index/fr_FR/?format=api", "source": [ "Some types of data are relevant to filtering and redirection at a given time, but their definition is too long to be included in the ruleset file. PF supports the use of tables, which are defined lists that can be manipulated without needing to reload the entire ruleset, and which can provide fast lookups. Table names are always enclosed within `< >`, like this:" ], "previous_source": "", "target": [ "" ], "id_hash": -261446461264052751, "content_hash": -261446461264052751, "location": "documentation/content/en/books/handbook/firewalls/_index.adoc:657", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 174, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 64, "source_unit": "https://translate-dev.freebsd.org/api/units/1219786/?format=api", "priority": 100, "id": 1220709, "web_url": "https://translate-dev.freebsd.org/translate/documentation/bookshandbookfirewalls_index/fr_FR/?checksum=7c5f27d42492bdf1", "url": "https://translate-dev.freebsd.org/api/units/1220709/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2021-06-08T13:13:09.247891Z" }, { "translation": "https://translate-dev.freebsd.org/api/translations/documentation/bookshandbookfirewalls_index/fr_FR/?format=api", "source": [ "In this example, the `192.168.2.0/24` network is part of the table, except for the address `192.168.2.5`, which is excluded using the `!` operator. It is also possible to load tables from files where each item is on a separate line, as seen in this example [.filename]#/etc/clients#:" ], "previous_source": "", "target": [ "" ], "id_hash": -9187928103890632823, "content_hash": -9187928103890632823, "location": "documentation/content/en/books/handbook/firewalls/_index.adoc:665", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 176, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 46, "source_unit": "https://translate-dev.freebsd.org/api/units/1219788/?format=api", "priority": 100, "id": 1220710, "web_url": "https://translate-dev.freebsd.org/translate/documentation/bookshandbookfirewalls_index/fr_FR/?checksum=007dec11b9c53f89", "url": "https://translate-dev.freebsd.org/api/units/1220710/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2021-06-08T13:13:09.260771Z" }, { "translation": "https://translate-dev.freebsd.org/api/translations/documentation/bookshandbookfirewalls_index/fr_FR/?format=api", "source": [ "A table's contents can be manipulated live, using `pfctl`. This example adds another network to the table:" ], "previous_source": "", "target": [ "" ], "id_hash": 1340926255982973068, "content_hash": 1340926255982973068, "location": "documentation/content/en/books/handbook/firewalls/_index.adoc:688", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 182, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 17, "source_unit": "https://translate-dev.freebsd.org/api/units/1219790/?format=api", "priority": 100, "id": 1220711, "web_url": "https://translate-dev.freebsd.org/translate/documentation/bookshandbookfirewalls_index/fr_FR/?checksum=929bed5345dc108c", "url": "https://translate-dev.freebsd.org/api/units/1220711/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2021-06-08T13:13:09.363859Z" }, { "translation": "https://translate-dev.freebsd.org/api/translations/documentation/bookshandbookfirewalls_index/fr_FR/?format=api", "source": [ "Note that any changes made this way will take affect now, making them ideal for testing, but will not survive a power failure or reboot. To make the changes permanent, modify the definition of the table in the ruleset or edit the file that the table refers to. One can maintain the on-disk copy of the table using a man:cron[8] job which dumps the table's contents to disk at regular intervals, using a command such as `pfctl -t clients -T show >/etc/clients`. Alternatively, [.filename]#/etc/clients# can be updated with the in-memory table contents:" ], "previous_source": "", "target": [ "" ], "id_hash": -8014146108339618480, "content_hash": -8014146108339618480, "location": "documentation/content/en/books/handbook/firewalls/_index.adoc:698", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 184, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 92, "source_unit": "https://translate-dev.freebsd.org/api/units/1219792/?format=api", "priority": 100, "id": 1220712, "web_url": "https://translate-dev.freebsd.org/translate/documentation/bookshandbookfirewalls_index/fr_FR/?checksum=10c8089342567d50", "url": "https://translate-dev.freebsd.org/api/units/1220712/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2021-06-08T13:13:09.375321Z" }, { "translation": "https://translate-dev.freebsd.org/api/translations/documentation/bookshandbookfirewalls_index/fr_FR/?format=api", "source": [ "If external SSH access is needed for legitimate users, changing the default port used by SSH can offer some protection. However, PF provides a more elegant solution. Pass rules can contain limits on what connecting hosts can do and violators can be banished to a table of addresses which are denied some or all access. It is even possible to drop all existing connections from machines which overreach the limits." ], "previous_source": "", "target": [ "" ], "id_hash": -955102587114324231, "content_hash": -955102587114324231, "location": "documentation/content/en/books/handbook/firewalls/_index.adoc:725", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 190, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 70, "source_unit": "https://translate-dev.freebsd.org/api/units/1219794/?format=api", "priority": 100, "id": 1220713, "web_url": "https://translate-dev.freebsd.org/translate/documentation/bookshandbookfirewalls_index/fr_FR/?checksum=72becb41e2fe7ef9", "url": "https://translate-dev.freebsd.org/api/units/1220713/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2021-06-08T13:13:09.463460Z" }, { "translation": "https://translate-dev.freebsd.org/api/translations/documentation/bookshandbookfirewalls_index/fr_FR/?format=api", "source": [ "The part in parentheses defines the limits and the numbers should be changed to meet local requirements. It can be read as follows:" ], "previous_source": "", "target": [ "" ], "id_hash": -591212052488793393, "content_hash": -591212052488793393, "location": "documentation/content/en/books/handbook/firewalls/_index.adoc:746", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 195, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 23, "source_unit": "https://translate-dev.freebsd.org/api/units/1219796/?format=api", "priority": 100, "id": 1220714, "web_url": "https://translate-dev.freebsd.org/translate/documentation/bookshandbookfirewalls_index/fr_FR/?checksum=77cb97c54879d2cf", "url": "https://translate-dev.freebsd.org/api/units/1220714/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2021-06-08T13:13:09.560390Z" }, { "translation": "https://translate-dev.freebsd.org/api/translations/documentation/bookshandbookfirewalls_index/fr_FR/?format=api", "source": [ "`overload <bruteforce>` means that any host which exceeds these limits gets its address added to the `bruteforce` table. The ruleset blocks all traffic from addresses in the `bruteforce` table." ], "previous_source": "", "target": [ "" ], "id_hash": 7132368791683431105, "content_hash": 7132368791683431105, "location": "documentation/content/en/books/handbook/firewalls/_index.adoc:753", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 198, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 29, "source_unit": "https://translate-dev.freebsd.org/api/units/1219798/?format=api", "priority": 100, "id": 1220715, "web_url": "https://translate-dev.freebsd.org/translate/documentation/bookshandbookfirewalls_index/fr_FR/?checksum=e2fb43a08b5f7ac1", "url": "https://translate-dev.freebsd.org/api/units/1220715/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2021-06-08T13:13:09.577184Z" }, { "translation": "https://translate-dev.freebsd.org/api/translations/documentation/bookshandbookfirewalls_index/fr_FR/?format=api", "source": [ "This example ruleset is intended mainly as an illustration. For example, if a generous number of connections in general are wanted, but the desire is to be more restrictive when it comes to ssh, supplement the rule above with something like the one below, early on in the rule set:" ], "previous_source": "", "target": [ "" ], "id_hash": 3039286888188609075, "content_hash": 3039286888188609075, "location": "documentation/content/en/books/handbook/firewalls/_index.adoc:763", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 201, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 50, "source_unit": "https://translate-dev.freebsd.org/api/units/1219800/?format=api", "priority": 100, "id": 1220716, "web_url": "https://translate-dev.freebsd.org/translate/documentation/bookshandbookfirewalls_index/fr_FR/?checksum=aa2db7526cfc0233", "url": "https://translate-dev.freebsd.org/api/units/1220716/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2021-06-08T13:13:09.658918Z" }, { "translation": "https://translate-dev.freebsd.org/api/translations/documentation/bookshandbookfirewalls_index/fr_FR/?format=api", "source": [ "Over time, tables will be filled by overload rules and their size will grow incrementally, taking up more memory. Sometimes an IP address that is blocked is a dynamically assigned one, which has since been assigned to a host who has a legitimate reason to communicate with hosts in the local network." ], "previous_source": "", "target": [ "" ], "id_hash": 4290393167750099926, "content_hash": 4290393167750099926, "location": "documentation/content/en/books/handbook/firewalls/_index.adoc:783", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 206, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 52, "source_unit": "https://translate-dev.freebsd.org/api/units/1219802/?format=api", "priority": 100, "id": 1220717, "web_url": "https://translate-dev.freebsd.org/translate/documentation/bookshandbookfirewalls_index/fr_FR/?checksum=bb8a89dac681f3d6", "url": "https://translate-dev.freebsd.org/api/units/1220717/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2021-06-08T13:13:09.684756Z" }, { "translation": "https://translate-dev.freebsd.org/api/translations/documentation/bookshandbookfirewalls_index/fr_FR/?format=api", "source": [ "For situations like these, pfctl provides the ability to expire table entries. For example, this command will remove `<bruteforce>` table entries which have not been referenced for `86400` seconds:" ], "previous_source": "", "target": [ "" ], "id_hash": -6841596278958278607, "content_hash": -6841596278958278607, "location": "documentation/content/en/books/handbook/firewalls/_index.adoc:786", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 207, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 29, "source_unit": "https://translate-dev.freebsd.org/api/units/1219804/?format=api", "priority": 100, "id": 1220718, "web_url": "https://translate-dev.freebsd.org/translate/documentation/bookshandbookfirewalls_index/fr_FR/?checksum=210dc46ec00eb831", "url": "https://translate-dev.freebsd.org/api/units/1220718/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2021-06-08T13:13:09.757983Z" }, { "translation": "https://translate-dev.freebsd.org/api/translations/documentation/bookshandbookfirewalls_index/fr_FR/?format=api", "source": [ "Once installed, expiretable can be run to remove `<bruteforce>` table entries older than a specified age. This example removes all entries older than 24 hours:" ], "previous_source": "", "target": [ "" ], "id_hash": -5489665179409178679, "content_hash": -5489665179409178679, "location": "documentation/content/en/books/handbook/firewalls/_index.adoc:796", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 210, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 25, "source_unit": "https://translate-dev.freebsd.org/api/units/1219806/?format=api", "priority": 100, "id": 1220719, "web_url": "https://translate-dev.freebsd.org/translate/documentation/bookshandbookfirewalls_index/fr_FR/?checksum=33d0ca9ad57c1fc9", "url": "https://translate-dev.freebsd.org/api/units/1220719/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2021-06-08T13:13:09.775014Z" }, { "translation": "https://translate-dev.freebsd.org/api/translations/documentation/bookshandbookfirewalls_index/fr_FR/?format=api", "source": [ "Not to be confused with the spamd daemon which comes bundled with spamassassin, package:mail/spamd[] can be configured with PF to provide an outer defense against SPAM. This spamd hooks into the PF configuration using a set of redirections." ], "previous_source": "", "target": [ "" ], "id_hash": 6517971288086390219, "content_hash": 6517971288086390219, "location": "documentation/content/en/books/handbook/firewalls/_index.adoc:807", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 213, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 38, "source_unit": "https://translate-dev.freebsd.org/api/units/1219808/?format=api", "priority": 100, "id": 1220720, "web_url": "https://translate-dev.freebsd.org/translate/documentation/bookshandbookfirewalls_index/fr_FR/?checksum=da747c5a5295a5cb", "url": "https://translate-dev.freebsd.org/api/units/1220720/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2021-06-08T13:13:09.853966Z" }, { "translation": "https://translate-dev.freebsd.org/api/translations/documentation/bookshandbookfirewalls_index/fr_FR/?format=api", "source": [ "Then, mount the filesystem:" ], "previous_source": "", "target": [ "" ], "id_hash": 4394456572278751229, "content_hash": 4394456572278751229, "location": "documentation/content/en/books/handbook/firewalls/_index.adoc:828", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 220, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 4, "source_unit": "https://translate-dev.freebsd.org/api/units/1219814/?format=api", "priority": 100, "id": 1220723, "web_url": "https://translate-dev.freebsd.org/translate/documentation/bookshandbookfirewalls_index/fr_FR/?checksum=bcfc3ef83b8e3ffd", "url": "https://translate-dev.freebsd.org/api/units/1220723/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2021-06-08T13:13:09.958097Z" }, { "translation": "https://translate-dev.freebsd.org/api/translations/documentation/bookshandbookfirewalls_index/fr_FR/?format=api", "source": [ "The two tables `<spamd>` and `<spamd-white>` are essential. SMTP traffic from an address listed in `<spamd>` but not in `<spamd-white>` is redirected to the spamd daemon listening at port 8025." ], "previous_source": "", "target": [ "" ], "id_hash": 8109421524544984277, "content_hash": 8109421524544984277, "location": "documentation/content/en/books/handbook/firewalls/_index.adoc:848", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 224, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 30, "source_unit": "https://translate-dev.freebsd.org/api/units/1219816/?format=api", "priority": 100, "id": 1220724, "web_url": "https://translate-dev.freebsd.org/translate/documentation/bookshandbookfirewalls_index/fr_FR/?checksum=f08a73e9386914d5", "url": "https://translate-dev.freebsd.org/api/units/1220724/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2021-06-08T13:13:09.981475Z" }, { "translation": "https://translate-dev.freebsd.org/api/translations/documentation/bookshandbookfirewalls_index/fr_FR/?format=api", "source": [ "The installation of package:mail/spamd[] includes a sample configuration file ([.filename]#/usr/local/etc/spamd.conf.sample#) and a man page for [.filename]#spamd.conf#. Refer to these for additional configuration options beyond those shown in this example." ], "previous_source": "", "target": [ "" ], "id_hash": 1418675661652007907, "content_hash": 1418675661652007907, "location": "documentation/content/en/books/handbook/firewalls/_index.adoc:852", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 226, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 29, "source_unit": "https://translate-dev.freebsd.org/api/units/1219818/?format=api", "priority": 100, "id": 1220725, "web_url": "https://translate-dev.freebsd.org/translate/documentation/bookshandbookfirewalls_index/fr_FR/?checksum=93b025ff70429be3", "url": "https://translate-dev.freebsd.org/api/units/1220725/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2021-06-08T13:13:10.058681Z" }, { "translation": "https://translate-dev.freebsd.org/api/translations/documentation/bookshandbookfirewalls_index/fr_FR/?format=api", "source": [ "Next, add this entry to [.filename]#/etc/rc.conf#. Additional flags are described in the man page specified by the comment:" ], "previous_source": "", "target": [ "" ], "id_hash": -2621897768518921654, "content_hash": -2621897768518921654, "location": "documentation/content/en/books/handbook/firewalls/_index.adoc:899", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 237, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 18, "source_unit": "https://translate-dev.freebsd.org/api/units/1219832/?format=api", "priority": 100, "id": 1220732, "web_url": "https://translate-dev.freebsd.org/translate/documentation/bookshandbookfirewalls_index/fr_FR/?checksum=5b9d25def60a524a", "url": "https://translate-dev.freebsd.org/api/units/1220732/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2021-06-08T13:13:10.267286Z" }, { "translation": "https://translate-dev.freebsd.org/api/translations/documentation/bookshandbookfirewalls_index/fr_FR/?format=api", "source": [ "When finished, reload the ruleset, start spamd by typing `service obspamd start`, and complete the configuration using `spamd-setup`. Finally, create a man:cron[8] job which calls `spamd-setup` to update the tables at reasonable intervals." ], "previous_source": "", "target": [ "" ], "id_hash": 782741991618821424, "content_hash": 782741991618821424, "location": "documentation/content/en/books/handbook/firewalls/_index.adoc:907", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 239, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 33, "source_unit": "https://translate-dev.freebsd.org/api/units/1219834/?format=api", "priority": 100, "id": 1220733, "web_url": "https://translate-dev.freebsd.org/translate/documentation/bookshandbookfirewalls_index/fr_FR/?checksum=8adcdbb1b938bd30", "url": "https://translate-dev.freebsd.org/api/units/1220733/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2021-06-08T13:13:10.279286Z" }, { "translation": "https://translate-dev.freebsd.org/api/translations/documentation/bookshandbookfirewalls_index/fr_FR/?format=api", "source": [ "PF also supports _greylisting_, which temporarily rejects messages from unknown hosts with _45n_ codes. Messages from greylisted hosts which try again within a reasonable time are let through. Traffic from senders which are set up to behave within the limits set by RFC 1123 and RFC 2821 are immediately let through." ], "previous_source": "", "target": [ "" ], "id_hash": 6330257442241703589, "content_hash": 6330257442241703589, "location": "documentation/content/en/books/handbook/firewalls/_index.adoc:914", "context": "", "note": "type: delimited block * 4", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 241, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 51, "source_unit": "https://translate-dev.freebsd.org/api/units/1219836/?format=api", "priority": 100, "id": 1220734, "web_url": "https://translate-dev.freebsd.org/translate/documentation/bookshandbookfirewalls_index/fr_FR/?checksum=d7d9979ac596eea5", "url": "https://translate-dev.freebsd.org/api/units/1220734/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2021-06-08T13:13:10.294129Z" }, { "translation": "https://translate-dev.freebsd.org/api/translations/documentation/bookshandbookfirewalls_index/fr_FR/?format=api", "source": [ "More information about greylisting as a technique can be found at the http://www.greylisting.org/[greylisting.org] web site. The most amazing thing about greylisting, apart from its simplicity, is that it still works. Spammers and malware writers have been very slow to adapt to bypass this technique." ], "previous_source": "", "target": [ "" ], "id_hash": -8154832975612223694, "content_hash": -8154832975612223694, "location": "documentation/content/en/books/handbook/firewalls/_index.adoc:918", "context": "", "note": "type: delimited block * 4", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 242, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 44, "source_unit": "https://translate-dev.freebsd.org/api/units/1219838/?format=api", "priority": 100, "id": 1220735, "web_url": "https://translate-dev.freebsd.org/translate/documentation/bookshandbookfirewalls_index/fr_FR/?checksum=0ed4369d65fddf32", "url": "https://translate-dev.freebsd.org/api/units/1220735/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2021-06-08T13:13:10.362611Z" }, { "translation": "https://translate-dev.freebsd.org/api/translations/documentation/bookshandbookfirewalls_index/fr_FR/?format=api", "source": [ "Refer to the spamd man page for descriptions of additional related parameters." ], "previous_source": "", "target": [ "" ], "id_hash": 7129389584105250966, "content_hash": 7129389584105250966, "location": "documentation/content/en/books/handbook/firewalls/_index.adoc:932", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 248, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 12, "source_unit": "https://translate-dev.freebsd.org/api/units/1219840/?format=api", "priority": 100, "id": 1220736, "web_url": "https://translate-dev.freebsd.org/translate/documentation/bookshandbookfirewalls_index/fr_FR/?checksum=e2f0ae0db9f6a096", "url": "https://translate-dev.freebsd.org/api/units/1220736/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2021-06-08T13:13:10.469176Z" }, { "translation": "https://translate-dev.freebsd.org/api/translations/documentation/bookshandbookfirewalls_index/fr_FR/?format=api", "source": [ "The `block-policy` is an option which can be set in the `options` part of the ruleset, which precedes the redirection and filtering rules. This option determines which feedback, if any, PF sends to hosts that are blocked by a rule. The option has two possible values: `drop` drops blocked packets with no feedback, and `return` returns a status code such as `Connection refused`." ], "previous_source": "", "target": [ "" ], "id_hash": -2841875966622148481, "content_hash": -2841875966622148481, "location": "documentation/content/en/books/handbook/firewalls/_index.adoc:951", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 254, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 63, "source_unit": "https://translate-dev.freebsd.org/api/units/1219844/?format=api", "priority": 100, "id": 1220738, "web_url": "https://translate-dev.freebsd.org/translate/documentation/bookshandbookfirewalls_index/fr_FR/?checksum=588fa0dd81c4587f", "url": "https://translate-dev.freebsd.org/api/units/1220738/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2021-06-08T13:13:10.562614Z" }, { "translation": "https://translate-dev.freebsd.org/api/translations/documentation/bookshandbookfirewalls_index/fr_FR/?format=api", "source": [ "If not set, the default policy is `drop`. To change the `block-policy`, specify the desired value:" ], "previous_source": "", "target": [ "" ], "id_hash": -973220185578684767, "content_hash": -973220185578684767, "location": "documentation/content/en/books/handbook/firewalls/_index.adoc:954", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 255, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 16, "source_unit": "https://translate-dev.freebsd.org/api/units/1219846/?format=api", "priority": 100, "id": 1220739, "web_url": "https://translate-dev.freebsd.org/translate/documentation/bookshandbookfirewalls_index/fr_FR/?checksum=727e6d65c657bea1", "url": "https://translate-dev.freebsd.org/api/units/1220739/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2021-06-08T13:13:10.569780Z" }, { "translation": "https://translate-dev.freebsd.org/api/translations/documentation/bookshandbookfirewalls_index/fr_FR/?format=api", "source": [ "In PF, `scrub` is a keyword which enables network packet normalization. This process reassembles fragmented packets and drops TCP packets that have invalid flag combinations. Enabling `scrub` provides a measure of protection against certain kinds of attacks based on incorrect handling of packet fragments. A number of options are available, but the simplest form is suitable for most configurations:" ], "previous_source": "", "target": [ "" ], "id_hash": -8966359606846529554, "content_hash": -8966359606846529554, "location": "documentation/content/en/books/handbook/firewalls/_index.adoc:964", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 257, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 59, "source_unit": "https://translate-dev.freebsd.org/api/units/1219848/?format=api", "priority": 100, "id": 1220740, "web_url": "https://translate-dev.freebsd.org/translate/documentation/bookshandbookfirewalls_index/fr_FR/?checksum=0391177181805fee", "url": "https://translate-dev.freebsd.org/api/units/1220740/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2021-06-08T13:13:10.580968Z" }, { "translation": "https://translate-dev.freebsd.org/api/translations/documentation/bookshandbookfirewalls_index/fr_FR/?format=api", "source": [ "Some services, such as NFS, require specific fragment handling options. Refer to https://home.nuug.no/\\~peter/pf/en/scrub.html[https://home.nuug.no/~peter/pf/en/scrub.html] for more information." ], "previous_source": "", "target": [ "" ], "id_hash": -1583022004300306492, "content_hash": -1583022004300306492, "location": "documentation/content/en/books/handbook/firewalls/_index.adoc:972", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 259, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 16, "source_unit": "https://translate-dev.freebsd.org/api/units/1219850/?format=api", "priority": 100, "id": 1220741, "web_url": "https://translate-dev.freebsd.org/translate/documentation/bookshandbookfirewalls_index/fr_FR/?checksum=6a07f9dfd20da7c4", "url": "https://translate-dev.freebsd.org/api/units/1220741/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2021-06-08T13:13:10.655951Z" }, { "translation": "https://translate-dev.freebsd.org/api/translations/documentation/bookshandbookfirewalls_index/fr_FR/?format=api", "source": [ "Even with a properly configured gateway to handle network address translation, one may have to compensate for other people's misconfigurations. A common misconfiguration is to let traffic with non-routable addresses out to the Internet. Since traffic from non-routeable addresses can play a part in several DoS attack techniques, consider explicitly blocking traffic from non-routeable addresses from entering the network through the external interface." ], "previous_source": "", "target": [ "" ], "id_hash": -7566053003103810061, "content_hash": -7566053003103810061, "location": "documentation/content/en/books/handbook/firewalls/_index.adoc:996", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 266, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 63, "source_unit": "https://translate-dev.freebsd.org/api/units/1219852/?format=api", "priority": 100, "id": 1220742, "web_url": "https://translate-dev.freebsd.org/translate/documentation/bookshandbookfirewalls_index/fr_FR/?checksum=16fffae15e384df3", "url": "https://translate-dev.freebsd.org/api/units/1220742/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2021-06-08T13:13:10.779068Z" }, { "translation": "https://translate-dev.freebsd.org/api/translations/documentation/bookshandbookfirewalls_index/fr_FR/?format=api", "source": [ "In this example, a macro containing non-routable addresses is defined, then used in blocking rules. Traffic to and from these addresses is quietly dropped on the gateway's external interface." ], "previous_source": "", "target": [ "" ], "id_hash": 340913660097141923, "content_hash": 340913660097141923, "location": "documentation/content/en/books/handbook/firewalls/_index.adoc:999", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 267, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 29, "source_unit": "https://translate-dev.freebsd.org/api/units/1219854/?format=api", "priority": 100, "id": 1220743, "web_url": "https://translate-dev.freebsd.org/translate/documentation/bookshandbookfirewalls_index/fr_FR/?checksum=84bb2b2ae92b1ca3", "url": "https://translate-dev.freebsd.org/api/units/1220743/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2021-06-08T13:13:10.786535Z" }, { "translation": "https://translate-dev.freebsd.org/api/translations/documentation/bookshandbookfirewalls_index/fr_FR/?format=api", "source": [ "On FreeBSD, ALTQ can be used with PF to provide Quality of Service (QOS). Once ALTQ is enabled, queues can be defined in the ruleset which determine the processing priority of outbound packets." ], "previous_source": "", "target": [ "" ], "id_hash": -1815233803274931078, "content_hash": -1815233803274931078, "location": "documentation/content/en/books/handbook/firewalls/_index.adoc:1014", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 271, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 33, "source_unit": "https://translate-dev.freebsd.org/api/units/1219856/?format=api", "priority": 100, "id": 1220744, "web_url": "https://translate-dev.freebsd.org/translate/documentation/bookshandbookfirewalls_index/fr_FR/?checksum=66cefe793384347a", "url": "https://translate-dev.freebsd.org/api/units/1220744/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2021-06-08T13:13:10.865073Z" }, { "translation": "https://translate-dev.freebsd.org/api/translations/documentation/bookshandbookfirewalls_index/fr_FR/?format=api", "source": [ "ALTQ is not available as a loadable kernel module. If the system's interfaces support ALTQ, create a custom kernel using the instructions in crossref:kernelconfig[kernelconfig,Configuring the FreeBSD Kernel]. The following kernel options are available. The first is needed to enable ALTQ. At least one of the other options is necessary to specify the queueing scheduler algorithm:" ], "previous_source": "", "target": [ "" ], "id_hash": -5573217923217837154, "content_hash": -5573217923217837154, "location": "documentation/content/en/books/handbook/firewalls/_index.adoc:1022", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 273, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 55, "source_unit": "https://translate-dev.freebsd.org/api/units/1219858/?format=api", "priority": 100, "id": 1220745, "web_url": "https://translate-dev.freebsd.org/translate/documentation/bookshandbookfirewalls_index/fr_FR/?checksum=32a7f3d3b6c2b39e", "url": "https://translate-dev.freebsd.org/api/units/1220745/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2021-06-08T13:13:10.949828Z" }, { "translation": "https://translate-dev.freebsd.org/api/translations/documentation/bookshandbookfirewalls_index/fr_FR/?format=api", "source": [ "Random Early Detection (RED) is used to avoid network congestion by measuring the length of the queue and comparing it to the minimum and maximum thresholds for the queue. When the queue is over the maximum, all new packets are randomly dropped." ], "previous_source": "", "target": [ "" ], "id_hash": 5933085766077314337, "content_hash": 5933085766077314337, "location": "documentation/content/en/books/handbook/firewalls/_index.adoc:1041", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 279, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 42, "source_unit": "https://translate-dev.freebsd.org/api/units/1219860/?format=api", "priority": 100, "id": 1220746, "web_url": "https://translate-dev.freebsd.org/translate/documentation/bookshandbookfirewalls_index/fr_FR/?checksum=d2568e11c4f6f521", "url": "https://translate-dev.freebsd.org/api/units/1220746/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2021-06-08T13:13:11.063608Z" }, { "translation": "https://translate-dev.freebsd.org/api/translations/documentation/bookshandbookfirewalls_index/fr_FR/?format=api", "source": [ "IPFW is a stateful firewall written for FreeBSD which supports both IPv4 and IPv6. It is comprised of several components: the kernel firewall filter rule processor and its integrated packet accounting facility, the logging facility, NAT, the man:dummynet[4] traffic shaper, a forward facility, a bridge facility, and an ipstealth facility." ], "previous_source": "", "target": [ "" ], "id_hash": 8272596741097436493, "content_hash": 8272596741097436493, "location": "documentation/content/en/books/handbook/firewalls/_index.adoc:1058", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 288, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 50, "source_unit": "https://translate-dev.freebsd.org/api/units/1219862/?format=api", "priority": 100, "id": 1220747, "web_url": "https://translate-dev.freebsd.org/translate/documentation/bookshandbookfirewalls_index/fr_FR/?checksum=f2ce2ae7eb2ab54d", "url": "https://translate-dev.freebsd.org/api/units/1220747/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2021-06-08T13:13:11.181289Z" }, { "translation": "https://translate-dev.freebsd.org/api/translations/documentation/bookshandbookfirewalls_index/fr_FR/?format=api", "source": [ "FreeBSD provides a sample ruleset in [.filename]#/etc/rc.firewall# which defines several firewall types for common scenarios to assist novice users in generating an appropriate ruleset. IPFW provides a powerful syntax which advanced users can use to craft customized rulesets that meet the security requirements of a given environment." ], "previous_source": "", "target": [ "" ], "id_hash": -7392422523649600044, "content_hash": -7392422523649600044, "location": "documentation/content/en/books/handbook/firewalls/_index.adoc:1061", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 289, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 47, "source_unit": "https://translate-dev.freebsd.org/api/units/1219864/?format=api", "priority": 100, "id": 1220748, "web_url": "https://translate-dev.freebsd.org/translate/documentation/bookshandbookfirewalls_index/fr_FR/?checksum=1968d6e1a844d5d4", "url": "https://translate-dev.freebsd.org/api/units/1220748/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2021-06-08T13:13:11.188799Z" }, { "translation": "https://translate-dev.freebsd.org/api/translations/documentation/bookshandbookfirewalls_index/fr_FR/?format=api", "source": [ "An alternate way to load a custom ruleset is to set the `firewall_script` variable to the absolute path of an _executable script_ that includes IPFW commands. The examples used in this section assume that the `firewall_script` is set to [.filename]#/etc/ipfw.rules#:" ], "previous_source": "", "target": [ "" ], "id_hash": -6887524896143444411, "content_hash": -6887524896143444411, "location": "documentation/content/en/books/handbook/firewalls/_index.adoc:1101", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 308, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 40, "source_unit": "https://translate-dev.freebsd.org/api/units/1219866/?format=api", "priority": 100, "id": 1220749, "web_url": "https://translate-dev.freebsd.org/translate/documentation/bookshandbookfirewalls_index/fr_FR/?checksum=206a98993fb5f645", "url": "https://translate-dev.freebsd.org/api/units/1220749/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2021-06-08T13:13:11.468313Z" }, { "translation": "https://translate-dev.freebsd.org/api/translations/documentation/bookshandbookfirewalls_index/fr_FR/?format=api", "source": [ "Only firewall rules with the `log` option will be logged. The default rules do not include this option and it must be manually added. Therefore it is advisable that the default ruleset is edited for logging. In addition, log rotation may be desired if the logs are stored in a separate file." ], "previous_source": "", "target": [ "" ], "id_hash": -4745224977921469526, "content_hash": -4745224977921469526, "location": "documentation/content/en/books/handbook/firewalls/_index.adoc:1120", "context": "", "note": "type: delimited block = 4", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 312, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 52, "source_unit": "https://translate-dev.freebsd.org/api/units/1219868/?format=api", "priority": 100, "id": 1220750, "web_url": "https://translate-dev.freebsd.org/translate/documentation/bookshandbookfirewalls_index/fr_FR/?checksum=3e2593061bae13aa", "url": "https://translate-dev.freebsd.org/api/units/1220750/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2021-06-08T13:13:11.483523Z" }, { "translation": "https://translate-dev.freebsd.org/api/translations/documentation/bookshandbookfirewalls_index/fr_FR/?format=api", "source": [ "There is no [.filename]#/etc/rc.conf# variable to set logging limits. To limit the number of times a rule is logged per connection attempt, specify the number using this line in [.filename]#/etc/sysctl.conf#:" ], "previous_source": "", "target": [ "" ], "id_hash": -2131595723238445622, "content_hash": -2131595723238445622, "location": "documentation/content/en/books/handbook/firewalls/_index.adoc:1124", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 313, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 30, "source_unit": "https://translate-dev.freebsd.org/api/units/1219870/?format=api", "priority": 100, "id": 1220751, "web_url": "https://translate-dev.freebsd.org/translate/documentation/bookshandbookfirewalls_index/fr_FR/?checksum=626b0cfbbfa16dca", "url": "https://translate-dev.freebsd.org/api/units/1220751/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2021-06-08T13:13:11.553768Z" }, { "translation": "https://translate-dev.freebsd.org/api/translations/documentation/bookshandbookfirewalls_index/fr_FR/?format=api", "source": [ "After saving the needed edits, start the firewall. To enable logging limits now, also set the `sysctl` value specified above:" ], "previous_source": "", "target": [ "" ], "id_hash": 975917659841450875, "content_hash": 975917659841450875, "location": "documentation/content/en/books/handbook/firewalls/_index.adoc:1152", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 320, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 20, "source_unit": "https://translate-dev.freebsd.org/api/units/1219872/?format=api", "priority": 100, "id": 1220752, "web_url": "https://translate-dev.freebsd.org/translate/documentation/bookshandbookfirewalls_index/fr_FR/?checksum=8d8b27f0e4e1537b", "url": "https://translate-dev.freebsd.org/api/units/1220752/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2021-06-08T13:13:11.655153Z" }, { "translation": "https://translate-dev.freebsd.org/api/translations/documentation/bookshandbookfirewalls_index/fr_FR/?format=api", "source": [ "When a packet enters the IPFW firewall, it is compared against the first rule in the ruleset and progresses one rule at a time, moving from top to bottom in sequence. When the packet matches the selection parameters of a rule, the rule's action is executed and the search of the ruleset terminates for that packet. This is referred to as \"first match wins\". If the packet does not match any of the rules, it gets caught by the mandatory IPFW default rule number 65535, which denies all packets and silently discards them. However, if the packet matches a rule that contains the `count`, `skipto`, or `tee` keywords, the search continues. Refer to man:ipfw[8] for details on how these keywords affect rule processing." ], "previous_source": "", "target": [ "" ], "id_hash": 8859355411407042808, "content_hash": 8859355411407042808, "location": "documentation/content/en/books/handbook/firewalls/_index.adoc:1168", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 323, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 123, "source_unit": "https://translate-dev.freebsd.org/api/units/1219874/?format=api", "priority": 100, "id": 1220753, "web_url": "https://translate-dev.freebsd.org/translate/documentation/bookshandbookfirewalls_index/fr_FR/?checksum=faf2c0cecbd9f8f8", "url": "https://translate-dev.freebsd.org/api/units/1220753/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2021-06-08T13:13:11.753306Z" }, { "translation": "https://translate-dev.freebsd.org/api/translations/documentation/bookshandbookfirewalls_index/fr_FR/?format=api", "source": [ "This section provides an overview of these keywords and their options. It is not an exhaustive list of every possible option. Refer to man:ipfw[8] for a complete description of the rule syntax that can be used when creating IPFW rules." ], "previous_source": "", "target": [ "" ], "id_hash": -7808029491071659818, "content_hash": -7808029491071659818, "location": "documentation/content/en/books/handbook/firewalls/_index.adoc:1180", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 326, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 40, "source_unit": "https://translate-dev.freebsd.org/api/units/1219878/?format=api", "priority": 100, "id": 1220755, "web_url": "https://translate-dev.freebsd.org/translate/documentation/bookshandbookfirewalls_index/fr_FR/?checksum=13a44e8bece650d6", "url": "https://translate-dev.freebsd.org/api/units/1220755/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2021-06-08T13:13:11.782352Z" }, { "translation": "https://translate-dev.freebsd.org/api/translations/documentation/bookshandbookfirewalls_index/fr_FR/?format=api", "source": [ "Each rule is associated with a number from `1` to `65534`. The number is used to indicate the order of rule processing. Multiple rules can have the same number, in which case they are applied according to the order in which they have been added." ], "previous_source": "", "target": [ "" ], "id_hash": -7760261617264219935, "content_hash": -7760261617264219935, "location": "documentation/content/en/books/handbook/firewalls/_index.adoc:1188", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 330, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 45, "source_unit": "https://translate-dev.freebsd.org/api/units/1219880/?format=api", "priority": 100, "id": 1220756, "web_url": "https://translate-dev.freebsd.org/translate/documentation/bookshandbookfirewalls_index/fr_FR/?checksum=144e032cbade28e1", "url": "https://translate-dev.freebsd.org/api/units/1220756/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2021-06-08T13:13:11.956050Z" }, { "translation": "https://translate-dev.freebsd.org/api/translations/documentation/bookshandbookfirewalls_index/fr_FR/?format=api", "source": [ "Each rule is associated with a set number from `0` to `31`. Sets can be individually disabled or enabled, making it possible to quickly add or delete a set of rules. If a SET_NUMBER is not specified, the rule will be added to set `0`." ], "previous_source": "", "target": [ "" ], "id_hash": -9214890636884823888, "content_hash": -9214890636884823888, "location": "documentation/content/en/books/handbook/firewalls/_index.adoc:1193", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 332, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 45, "source_unit": "https://translate-dev.freebsd.org/api/units/1219882/?format=api", "priority": 100, "id": 1220757, "web_url": "https://translate-dev.freebsd.org/translate/documentation/bookshandbookfirewalls_index/fr_FR/?checksum=001e21c9d06830b0", "url": "https://translate-dev.freebsd.org/api/units/1220757/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2021-06-08T13:13:11.985223Z" }, { "translation": "https://translate-dev.freebsd.org/api/translations/documentation/bookshandbookfirewalls_index/fr_FR/?format=api", "source": [ "A rule can be associated with one of the following actions. The specified action will be executed when the packet matches the selection criterion of the rule." ], "previous_source": "", "target": [ "" ], "id_hash": -405698893957092251, "content_hash": -405698893957092251, "location": "documentation/content/en/books/handbook/firewalls/_index.adoc:1197", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 334, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 27, "source_unit": "https://translate-dev.freebsd.org/api/units/1219884/?format=api", "priority": 100, "id": 1220758, "web_url": "https://translate-dev.freebsd.org/translate/documentation/bookshandbookfirewalls_index/fr_FR/?checksum=7a5eab0163eb2c65", "url": "https://translate-dev.freebsd.org/api/units/1220758/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2021-06-08T13:13:12.009529Z" }, { "translation": "https://translate-dev.freebsd.org/api/translations/documentation/bookshandbookfirewalls_index/fr_FR/?format=api", "source": [ "`check-state`: checks the packet against the dynamic state table. If a match is found, execute the action associated with the rule which generated this dynamic rule, otherwise move to the next rule. A `check-state` rule does not have selection criterion. If no `check-state` rule is present in the ruleset, the dynamic rules table is checked at the first `keep-state` or `limit` rule." ], "previous_source": "", "target": [ "" ], "id_hash": 8269505730999288616, "content_hash": 8269505730999288616, "location": "documentation/content/en/books/handbook/firewalls/_index.adoc:1204", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 336, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 62, "source_unit": "https://translate-dev.freebsd.org/api/units/1219886/?format=api", "priority": 100, "id": 1220759, "web_url": "https://translate-dev.freebsd.org/translate/documentation/bookshandbookfirewalls_index/fr_FR/?checksum=f2c32fa60c450328", "url": "https://translate-dev.freebsd.org/api/units/1220759/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2021-06-08T13:13:12.048083Z" }, { "translation": "https://translate-dev.freebsd.org/api/translations/documentation/bookshandbookfirewalls_index/fr_FR/?format=api", "source": [ "`count`: updates counters for all packets that match the rule. The search continues with the next rule." ], "previous_source": "", "target": [ "" ], "id_hash": 4786105103001126090, "content_hash": 4786105103001126090, "location": "documentation/content/en/books/handbook/firewalls/_index.adoc:1207", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 337, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 17, "source_unit": "https://translate-dev.freebsd.org/api/units/1219888/?format=api", "priority": 100, "id": 1220760, "web_url": "https://translate-dev.freebsd.org/translate/documentation/bookshandbookfirewalls_index/fr_FR/?checksum=c26ba93bba1104ca", "url": "https://translate-dev.freebsd.org/api/units/1220760/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2021-06-08T13:13:12.058631Z" }, { "translation": "https://translate-dev.freebsd.org/api/translations/documentation/bookshandbookfirewalls_index/fr_FR/?format=api", "source": [ "Additional actions are available. Refer to man:ipfw[8] for details." ], "previous_source": "", "target": [ "" ], "id_hash": 5519536034393893693, "content_hash": 5519536034393893693, "location": "documentation/content/en/books/handbook/firewalls/_index.adoc:1212", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 339, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 9, "source_unit": "https://translate-dev.freebsd.org/api/units/1219890/?format=api", "priority": 100, "id": 1220761, "web_url": "https://translate-dev.freebsd.org/translate/documentation/bookshandbookfirewalls_index/fr_FR/?checksum=cc9954c78f042b3d", "url": "https://translate-dev.freebsd.org/api/units/1220761/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2021-06-08T13:13:12.072128Z" }, { "translation": "https://translate-dev.freebsd.org/api/translations/documentation/bookshandbookfirewalls_index/fr_FR/?format=api", "source": [ "When a packet matches a rule with the `log` keyword, a message will be logged to man:syslogd[8] with a facility name of `SECURITY`. Logging only occurs if the number of packets logged for that particular rule does not exceed a specified LOG_AMOUNT. If no LOG_AMOUNT is specified, the limit is taken from the value of `net.inet.ip.fw.verbose_limit`. A value of zero removes the logging limit. Once the limit is reached, logging can be re-enabled by clearing the logging counter or the packet counter for that rule, using `ipfw resetlog`." ], "previous_source": "", "target": [ "" ], "id_hash": 6589732765044587613, "content_hash": 6589732765044587613, "location": "documentation/content/en/books/handbook/firewalls/_index.adoc:1219", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 341, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 88, "source_unit": "https://translate-dev.freebsd.org/api/units/1219892/?format=api", "priority": 100, "id": 1220762, "web_url": "https://translate-dev.freebsd.org/translate/documentation/bookshandbookfirewalls_index/fr_FR/?checksum=db736f09313c3c5d", "url": "https://translate-dev.freebsd.org/api/units/1220762/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2021-06-08T13:13:12.085241Z" }, { "translation": "https://translate-dev.freebsd.org/api/translations/documentation/bookshandbookfirewalls_index/fr_FR/?format=api", "source": [ "Logging is done after all other packet matching conditions have been met, and before performing the final action on the packet. The administrator decides which rules to enable logging on." ], "previous_source": "", "target": [ "" ], "id_hash": 3923425222862943264, "content_hash": 3923425222862943264, "location": "documentation/content/en/books/handbook/firewalls/_index.adoc:1224", "context": "", "note": "type: delimited block = 4", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 342, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 30, "source_unit": "https://translate-dev.freebsd.org/api/units/1219894/?format=api", "priority": 100, "id": 1220763, "web_url": "https://translate-dev.freebsd.org/translate/documentation/bookshandbookfirewalls_index/fr_FR/?checksum=b672ce73f78db420", "url": "https://translate-dev.freebsd.org/api/units/1220763/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2021-06-08T13:13:12.093295Z" }, { "translation": "https://translate-dev.freebsd.org/api/translations/documentation/bookshandbookfirewalls_index/fr_FR/?format=api", "source": [ "The `from` keyword must be followed by the source address or a keyword that represents the source address. An address can be represented by `any`, `me` (any address configured on an interface on this system), `me6`, (any IPv6 address configured on an interface on this system), or `table` followed by the number of a lookup table which contains a list of addresses. When specifying an IP address, it can be optionally followed by its CIDR mask or subnet mask. For example, `1.2.3.4/25` or `1.2.3.4:255.255.255.128`." ], "previous_source": "", "target": [ "" ], "id_hash": 409859333086951825, "content_hash": 409859333086951825, "location": "documentation/content/en/books/handbook/firewalls/_index.adoc:1234", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 346, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 84, "source_unit": "https://translate-dev.freebsd.org/api/units/1219896/?format=api", "priority": 100, "id": 1220764, "web_url": "https://translate-dev.freebsd.org/translate/documentation/bookshandbookfirewalls_index/fr_FR/?checksum=85b01ce45486b991", "url": "https://translate-dev.freebsd.org/api/units/1220764/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2021-06-08T13:13:12.173609Z" }, { "translation": "https://translate-dev.freebsd.org/api/translations/documentation/bookshandbookfirewalls_index/fr_FR/?format=api", "source": [ "The `to` keyword must be followed by the destination address or a keyword that represents the destination address. The same keywords and addresses described in the SRC section can be used to describe the destination." ], "previous_source": "", "target": [ "" ], "id_hash": -7091683899613384562, "content_hash": -7091683899613384562, "location": "documentation/content/en/books/handbook/firewalls/_index.adoc:1241", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 350, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 35, "source_unit": "https://translate-dev.freebsd.org/api/units/1219898/?format=api", "priority": 100, "id": 1220765, "web_url": "https://translate-dev.freebsd.org/translate/documentation/bookshandbookfirewalls_index/fr_FR/?checksum=1d954711102ff08e", "url": "https://translate-dev.freebsd.org/api/units/1220765/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2021-06-08T13:13:12.255496Z" }, { "translation": "https://translate-dev.freebsd.org/api/translations/documentation/bookshandbookfirewalls_index/fr_FR/?format=api", "source": [ "Several keywords can follow the source and destination. As the name suggests, OPTIONS are optional. Commonly used options include `in` or `out`, which specify the direction of packet flow, `icmptypes` followed by the type of ICMP message, and `keep-state`." ], "previous_source": "", "target": [ "" ], "id_hash": 3970497259817827760, "content_hash": 3970497259817827760, "location": "documentation/content/en/books/handbook/firewalls/_index.adoc:1249", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 354, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 39, "source_unit": "https://translate-dev.freebsd.org/api/units/1219900/?format=api", "priority": 100, "id": 1220766, "web_url": "https://translate-dev.freebsd.org/translate/documentation/bookshandbookfirewalls_index/fr_FR/?checksum=b71a0a38a11a7db0", "url": "https://translate-dev.freebsd.org/api/units/1220766/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2021-06-08T13:13:12.282117Z" }, { "translation": "https://translate-dev.freebsd.org/api/translations/documentation/bookshandbookfirewalls_index/fr_FR/?format=api", "source": [ "The dynamic rules facility is vulnerable to resource depletion from a SYN-flood attack which would open a huge number of dynamic rules. To counter this type of attack with IPFW, use `limit`. This option limits the number of simultaneous sessions by checking the open dynamic rules, counting the number of times this rule and IP address combination occurred. If this count is greater than the value specified by `limit`, the packet is discarded." ], "previous_source": "", "target": [ "" ], "id_hash": -7967466140645977013, "content_hash": -7967466140645977013, "location": "documentation/content/en/books/handbook/firewalls/_index.adoc:1256", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 356, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 73, "source_unit": "https://translate-dev.freebsd.org/api/units/1219902/?format=api", "priority": 100, "id": 1220767, "web_url": "https://translate-dev.freebsd.org/translate/documentation/bookshandbookfirewalls_index/fr_FR/?checksum=116ddfc22ed8144b", "url": "https://translate-dev.freebsd.org/api/units/1220767/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2021-06-08T13:13:12.346587Z" } ] }