{
    "$schema": "http://json-schema.org/draft-06/schema#",
    "description": "ParaDrop host configuration - firewall defaults object",
    "type": "object",
    "properties": {
        "conntrack": {},
        "forward": {
            "type": "string",
            "enum": [
                "ACCEPT",
                "REJECT",
                "DROP"
            ]
        },
        "input": {
            "type": "string",
            "enum": [
                "ACCEPT",
                "REJECT",
                "DROP"
            ]
        },
        "masq": {},
        "masq_src": {
            "type": "array",
            "description": "List of source addresses or subnets to which SNAT should be applied.",
            "items": {
                "type": "string"
            },
            "_uniqueItems": true
        },
        "output": {
            "type": "string",
            "enum": [
                "ACCEPT",
                "REJECT",
                "DROP"
            ]
        }
    }
}