# Firewall Rules

Receptor has the ability to accept, drop, or reject traffic based on any combination of the following:

- `FromNode`

- `ToNode`

- `FromService`

- `ToService`

Firewall rules are added under the `node` entry in a Receptor configuration file:

    # Accepts everything
    node:
      firewallrules:
        - action: "accept"

    # Drops traffic from `foo` to `bar`'s control service
    node:
      firewallrules:
        - action: "drop"
          fromnode: "foo"
          tonode: "bar"
          toservice: "control"

    # Rejects traffic originating from nodes like abcb, adfb, etc
    node:
      firewallrules:
        - action: "reject"
          fromnode: "/a.*b/"

    # Rejects traffic destined for nodes like abcb, AdfB, etc
    node:
      firewallrules:
        - action: "reject"
          tonode: "/(?i)a.*b/"