vyos-1x.git/interface-definitions/include/firewall, branch 1.4.0-epa1 VyOS command definitions, scripts, and utilities (mirror of https://github.com/marekm72/vyos-1x.git) https://git.amelek.net/marekm72/vyos-1x.git/atom?h=1.4.0-epa1 2024-02-01T20:22:26+00:00 T4839: firewall: Add dynamic address group in firewall configuration, and appropiate commands to populate such groups using source and destination address of the packet. 2024-02-01T20:22:26+00:00 Nicolas Fort nicolasfort1988@gmail.com 2024-01-05T12:13:17+00:00 urn:sha1:3ce9583b9420ed72cf45728f439f00b1c4cf5800 (cherry picked from commit 6ce5fedb602c5ea0df52049a5e9c4fb4f5a86122) T5977: firewall: remove ipsec options in output chain rule definitions, since it's not supported. 2024-02-01T07:15:29+00:00 Nicolas Fort nicolasfort1988@gmail.com 2024-01-23T18:43:34+00:00 urn:sha1:f00a8dd320ed52677d3c45044cf03eaf63818567 (cherry picked from commit 9d490ecf616eb9d019beee37a3802705c4109d9d) firewall: T5729: T5681: T5217: backport subsystem from current branch 2024-01-22T06:47:17+00:00 Christian Breunig christian@breunig.cc 2024-01-19T20:01:52+00:00 urn:sha1:2ec023752bdd400835eb69a8f1f9d2873cef61fa This is a combined backport for all accumulated changes done to the firewall subsystem on the current branch. conntrack: T5376: T5779: backport from current 2024-01-18T21:09:30+00:00 Christian Breunig christian@breunig.cc 2024-01-18T21:05:16+00:00 urn:sha1:80068c8ce453a385981999c25e4ff5aeaa6bf030 Backport of the conntrack system from current branch. (cherry picked from commit fd0bcaf12) (cherry picked from commit 5acf5aced) (cherry picked from commit 42ff4d8a7) (cherry picked from commit 24a1a7059) Merge pull request #2793 from sarthurdev/T5550_sagitta 2024-01-11T05:41:17+00:00 Christian Breunig christian@breunig.cc 2024-01-11T05:41:17+00:00 urn:sha1:68bacdc20c10566671ce809e9668ca27666bca22 interface: T5550: Interface source-validation priority over global value (backport) T5896: firewall: backport interface validator for firewall rules. 2024-01-08T11:05:56+00:00 Nicolas Fort nicolasfort1988@gmail.com 2024-01-08T11:05:56+00:00 urn:sha1:02db800b3aaa4b5c7de5564271c0ea37e895915a firewall: T5834: Improve log message and simplify log-option include 2023-12-30T19:34:43+00:00 Indrajit Raychaudhuri irc@indrajit.com 2023-12-22T23:22:20+00:00 urn:sha1:57faafc8f8597f62d5edb5529349a565d7d2e865 `include/firewall/rule-log-options.xml.i` is now more aptly renamed to `include/firewall/log-options.xml.i`. (cherry picked from commit 53a48f499ae9bcc2f657136bb7779b38aad1c242) firewall: T5834: Remove vestigial include file 2023-12-30T19:34:11+00:00 Indrajit Raychaudhuri irc@indrajit.com 2023-12-22T23:14:04+00:00 urn:sha1:3d579863c98627fbe83efc6033ccc37b81e68d96 This file is a left over from previous refactoring and no longer referenced anywhere in the interface definitions. (cherry picked from commit f8f382b2195da8db8b730f107ffba16e67dac822) firewall: T5834: Rename 'enable-default-log' to 'default-log' 2023-12-30T19:31:55+00:00 Indrajit Raychaudhuri irc@indrajit.com 2023-12-18T08:45:12+00:00 urn:sha1:2c8e41465ee3e4ee8fe5048df3265c7b10ee3b91 Rename chain level defaults log option from `enable-default-log` to `default-log` for consistency. (cherry picked from commit 245e758aa2ea8779186d0c92d79d33170d036992) T5775: firewall: re-add state-policy to firewall. These commands are now included in <set firewall global-options state-policy> node. 2023-12-15T20:28:51+00:00 Nicolas Fort nicolasfort1988@gmail.com 2023-11-24T10:24:48+00:00 urn:sha1:fcedc85e2b4d3d6663b0c78c3fb3bd93db91fcc2