diff options
author | Viacheslav Hletenko <v.gletenko@vyos.io> | 2022-06-05 12:20:38 +0300 |
---|---|---|
committer | Viacheslav Hletenko <v.gletenko@vyos.io> | 2022-06-05 09:22:31 +0000 |
commit | 654c403cebe3cdbfa7a36348c75191b47f882ac9 (patch) | |
tree | a39307f088a78d4e0b9503a2a9a0d612c949c31c /src/conf_mode | |
parent | e990b2f4c045f5d1be02915ec7d8869d5475ed4e (diff) | |
parent | d1bdf2b9d80d2e34b7370823d6f684102d7c9f4e (diff) | |
download | vyos-1x-654c403cebe3cdbfa7a36348c75191b47f882ac9.tar.gz vyos-1x-654c403cebe3cdbfa7a36348c75191b47f882ac9.zip |
Merge pull request #2 from sarthurdev/T970
firewall: T970: Maintain a domain state to fallback if resolution fails
Diffstat (limited to 'src/conf_mode')
-rwxr-xr-x | src/conf_mode/firewall.py | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/src/conf_mode/firewall.py b/src/conf_mode/firewall.py index 3c6aff386..335098bf1 100755 --- a/src/conf_mode/firewall.py +++ b/src/conf_mode/firewall.py @@ -427,7 +427,8 @@ def apply(firewall): domains.append(address) # Add elements to domain-group, try to resolve domain => ip # and add elements to nft set - elements = get_ips_domains_dict(domains) + ip_dict = get_ips_domains_dict(domains) + elements = sum(ip_dict.values(), []) nft_init_set(group) nft_add_set_elements(group, elements) else: |