22

✏️ Editing: port.yaml

blocked-port list:
  help: List blocked ports.
        Only applicable if the FIREWALL.port_blocking_mode config option is set to ALLOW (allow access to all ports by default).
  return_type: BlockedPortsAgentResponse
  cli:
    users:
      - root
  type: dict
  schema:
    limit:
      type: integer
      coerce: int
      default: 50
    offset:
      type: integer
      coerce: int
      default: 0
    by_ip:
      type: string
    by_comment:
      type: string
    by_country_code:
      type: string

blocked-port add:
  help: Add item(-s) to blocked ports.
        Only applicable if the FIREWALL.port_blocking_mode config option is set to ALLOW (allow access to all ports by default).
  return_type: NoItemsAgentResponse
  cli:
    users:
      - root
  type: dict
  schema:
    items:
      help: The format should be a port-protocol item. Example 8080:tcp
      type: list
      schema:
        type: port_proto
        coerce: port_proto
      positional: true
      required: true
    comment:
      type: string
      required: false
    ips:
      type: list
      schema:
        type: ip
        coerce: ip_discard_host_bits
        check_with:
          - enforce64min_subnet_mask_for_ipv6

blocked-port delete:
  help: Remove item(-s) from blocked ports.
        Only applicable if the FIREWALL.port_blocking_mode config option is set to ALLOW (allow access to all ports by default).
  return_type: NoItemsAgentResponse
  cli:
    users:
      - root
  type: dict
  schema:
    items:
      help: The format should be a port-protocol item. Example 8080:tcp
      type: list
      schema:
        type: port_proto
        coerce: port_proto
      positional: true
      required: true

blocked-port edit:
  help: Edit comment on item in the blocked ports.
        Only applicable if the FIREWALL.port_blocking_mode config option is set to ALLOW (allow access to all ports by default).
  return_type: NoItemsAgentResponse
  cli:
    users:
      - root
  type: dict
  schema:
    items:
      help: The format should be a port-protocol item. Example 8080:tcp
      type: list
      schema:
        type: port_proto
        coerce: port_proto
      positional: true
      required: true
    comment:
      type: string
      required: true

MR SKB