Missing tags, missing firewall rule information, line breaks in the middle of comments even on wider terminals
Some examples of garbled output:
missing starting comment /* tag, missing condition - destination port
9123 accept udp 10646 809096 condition - saddr 0.0.0.0/0 daddr 0.0.0.0/0 VID-LOCAL-9123 */
line break in the middle of a comment, rule 1194 missing destination port
15 accept tcp 26 1560 condition - saddr 0.0.0.0/0 daddr 0.0.0.0/0 dports 2012,3012 /* OUTSIDE-LOCAL-1 5 */ 1194 accept udp 8437 380191 condition - saddr 0.0.0.0/0 daddr 0.0.0.0/0 OUTSIDE-LOCAL-1194 */
what do the 0, 1, 2 before the comment mean?
9802 accept icmpv6 0 0 condition - saddr ::/0 daddr ::/0 6outside-in-9802 */ 9803 accept icmpv6 0 0 condition - saddr ::/0 daddr ::/0 0 /* 6outside-in-9803 */ 9804 accept icmpv6 0 0 condition - saddr ::/0 daddr ::/0 1 /* 6outside-in-9804 */ 9805 accept icmpv6 0 0 condition - saddr ::/0 daddr ::/0 2 /* 6outside-in-9805 */
closing */ tag used in place of opening /*, missing closing tag, missing rule condition information, missing whitespace before "LOG enabled"
IPv6 Firewall "6INSIDE-OUT": Active on (eth0,OUT) rule action proto packets bytes ---- ------ ----- ------- ----- 9025 reject tcp_udp 0 0 condition - saddr ::/0 daddr ::/0 6INSIDE-OUT-9025 */ reject-with icmp6-port-u nreachableLOG enabled 10000 accept all 6215584 754005993 condition - saddr ::/0 daddr ::/0
# show firewall ipv6-name 6INSIDE-OUT default-action accept rule 9025 { action reject description "Block outgoing SMTP" destination { port 25 } log enable protocol tcp_udp }