honour shorewall INVALID_DISPOSITION and UNTRACKED_DISPOSITION

2026-10-04 15:34:11 +11:00
parent 1e32bde555
commit c3049e3ed4
6 changed files with 136 additions and 13 deletions
@@ -8,6 +8,10 @@ settings:
  log_level: info
  table_name: tomswall
  implicit_continue: false
+  # ct state invalid/untracked verdict: accept, drop, reject, continue (pass to rules)
+  # defaults: invalid drop, untracked continue (migrate defaults both to continue, as shorewall)
+  invalid_disposition: drop
+  untracked_disposition: continue

 # Named port groups — reusable port+protocol combos referenced in rules
 portgroups: