From 3f0d99d9c2b569333cebd057f5a8c550b268a599 Mon Sep 17 00:00:00 2001 From: Lukas Sismis Date: Fri, 28 Aug 2026 12:21:09 +0200 Subject: [PATCH] fw: document config action in FW mode --- doc/userguide/firewall/firewall-design.rst | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/doc/userguide/firewall/firewall-design.rst b/doc/userguide/firewall/firewall-design.rst index b2eb9d38c7..351cd19f25 100644 --- a/doc/userguide/firewall/firewall-design.rst +++ b/doc/userguide/firewall/firewall-design.rst @@ -122,6 +122,14 @@ alert action in firewall rules. The effect will be the creation of an alert event when the firewall rule matches. +config +~~~~~~ + +``config`` is a primary firewall action used to apply the setting of the ``config`` +rule keyword when the rule matches, see :doc:`../rules/config`. +The ``config`` action does not issue a verdict for the packet or the flow, so the +other tables are still evaluated. It is not available as a secondary action. + Multi action rules ~~~~~~~~~~~~~~~~~~