summaryrefslogtreecommitdiff
path: root/python/vyos/nat.py
diff options
context:
space:
mode:
authorNicolas Fort <nicolasfort1988@gmail.com>2024-08-30 17:54:17 +0000
committerNicolas Fort <nicolasfort1988@gmail.com>2024-09-16 11:35:26 +0000
commit4c3d037f036e84c77333a400b35bb1a628a1a118 (patch)
tree226dcbe2f55acf9d5e482deb79bf47e6da000d03 /python/vyos/nat.py
parent2feed8f99c6056ea8f6fd1da88ab14fa17a0a84e (diff)
downloadvyos-1x-4c3d037f036e84c77333a400b35bb1a628a1a118.tar.gz
vyos-1x-4c3d037f036e84c77333a400b35bb1a628a1a118.zip
T6687: add fqdn support to nat rules.
Diffstat (limited to 'python/vyos/nat.py')
-rw-r--r--python/vyos/nat.py7
1 files changed, 7 insertions, 0 deletions
diff --git a/python/vyos/nat.py b/python/vyos/nat.py
index e54548788..4fe21ef13 100644
--- a/python/vyos/nat.py
+++ b/python/vyos/nat.py
@@ -236,6 +236,13 @@ def parse_nat_rule(rule_conf, rule_id, nat_type, ipv6=False):
output.append(f'{proto} {prefix}port {operator} @P_{group_name}')
+ if 'fqdn' in side_conf:
+ fqdn = side_conf['fqdn']
+ operator = ''
+ if fqdn[0] == '!':
+ operator = '!='
+ output.append(f' ip {prefix}addr {operator} @FQDN_nat_{nat_type}_{rule_id}_{prefix}')
+
output.append('counter')
if 'log' in rule_conf: