summaryrefslogtreecommitdiff
path: root/python/vyos/firewall.py
diff options
context:
space:
mode:
authorNicolas Fort <nicolasfort1988@gmail.com>2024-01-22 11:28:20 +0000
committerNicolas Fort <nicolasfort1988@gmail.com>2024-01-22 11:28:20 +0000
commit0a436e1fce66391311799bc970f05f6f4ba880ad (patch)
tree99803d5a26c2eae196e913b905abda81af51f5bb /python/vyos/firewall.py
parent34419458d99cf8d07279f92935c0f10d9b603f33 (diff)
downloadvyos-1x-0a436e1fce66391311799bc970f05f6f4ba880ad.tar.gz
vyos-1x-0a436e1fce66391311799bc970f05f6f4ba880ad.zip
T5957: fix removal of interface in firewall rules.
Diffstat (limited to 'python/vyos/firewall.py')
-rw-r--r--python/vyos/firewall.py4
1 files changed, 2 insertions, 2 deletions
diff --git a/python/vyos/firewall.py b/python/vyos/firewall.py
index a2622fa00..28ebf282c 100644
--- a/python/vyos/firewall.py
+++ b/python/vyos/firewall.py
@@ -280,7 +280,7 @@ def parse_rule(rule_conf, hook, fw_name, rule_id, ip_name):
operator = '!='
iiface = iiface[1:]
output.append(f'iifname {operator} {{{iiface}}}')
- else:
+ elif 'group' in rule_conf['inbound_interface']:
iiface = rule_conf['inbound_interface']['group']
if iiface[0] == '!':
operator = '!='
@@ -295,7 +295,7 @@ def parse_rule(rule_conf, hook, fw_name, rule_id, ip_name):
operator = '!='
oiface = oiface[1:]
output.append(f'oifname {operator} {{{oiface}}}')
- else:
+ elif 'group' in rule_conf['outbound_interface']:
oiface = rule_conf['outbound_interface']['group']
if oiface[0] == '!':
operator = '!='