<!--
  -- This service describes how an interface should be protected through
  -- a firewall.
  -->
<service name="firewall" interface="org.opensuse.Network.Firewall" object-class="netif">

  <define name="fw-request" class="dict">
    <!-- By specifying a fw zone, you can select one of several preset security levels -->
    <zone type="string"/>

  </define>

  <method name="firewallUp">
    <arguments>
      <config type="fw-request">
        <meta:mapping document-node="/firewall" skip-unless-present="true"/>
      </config>
    </arguments>
  </method>

  <method name="firewallDown"/>
</service>

