summaryrefslogtreecommitdiff
path: root/python
diff options
context:
space:
mode:
authorChristian Breunig <christian@breunig.cc>2024-03-06 06:50:45 +0100
committerGitHub <noreply@github.com>2024-03-06 06:50:45 +0100
commit82d40098e3f2d53e2c851e8ffb165d7814c60f0f (patch)
tree01b08c3e602f7fcf254560191f478ed63f53da47 /python
parentfeb83f2f2b9f1d48bb5389ca5244b56edf2efbc8 (diff)
parent2f232841a544fb3d602831cf0b2c95c447a245ea (diff)
downloadvyos-1x-82d40098e3f2d53e2c851e8ffb165d7814c60f0f.tar.gz
vyos-1x-82d40098e3f2d53e2c851e8ffb165d7814c60f0f.zip
Merge pull request #3095 from vyos/mergify/bp/sagitta/pr-3087
T6061: fix rule parsing when connection-status is used (backport #3087)
Diffstat (limited to 'python')
-rw-r--r--python/vyos/firewall.py4
1 files changed, 2 insertions, 2 deletions
diff --git a/python/vyos/firewall.py b/python/vyos/firewall.py
index 49e095946..e70b4f0d9 100644
--- a/python/vyos/firewall.py
+++ b/python/vyos/firewall.py
@@ -136,10 +136,10 @@ def parse_rule(rule_conf, hook, fw_name, rule_id, ip_name):
if 'connection_status' in rule_conf and rule_conf['connection_status']:
status = rule_conf['connection_status']
if status['nat'] == 'destination':
- nat_status = '{dnat}'
+ nat_status = 'dnat'
output.append(f'ct status {nat_status}')
if status['nat'] == 'source':
- nat_status = '{snat}'
+ nat_status = 'snat'
output.append(f'ct status {nat_status}')
if 'protocol' in rule_conf and rule_conf['protocol'] != 'all':