vyos-1x.git - VyOS command definitions, scripts, and utilities (mirror of https://github.com/marekm72/vyos-1x.git)

Age	Commit message (Collapse)	Author
2024-07-28	firewall: T4694: Adding rt ipsec exists/missing match to firewall configs ↵	talmakion
	(#3616) * Change ipsec match-ipsec/none to match-ipsec-in and match-none-in for fw rules * Add ipsec match-ipsec-out and match-none-out * Change all the points where the match-ipsec.xml.i include was used before, making sure the new includes (match-ipsec-in/out.xml.i) are used appropriately. There were a handful of spots where match-ipsec.xml.i had snuck back in for output hooked chains already (the common-rule-* includes) * Add the -out generators to rendered templates * Heavy modification to firewall config validators: * I needed to check for ipsec-in matches no matter how deeply nested under an output-hook chain(via jump-target) - this always generates an error. * Ended up retrofitting the jump-targets validator from root chains and for named custom chains. It checks for recursive loops and improper IPsec matches. * Added "test_ipsec_metadata_match" and "test_cyclic_jump_validation" smoketests
2024-06-04	T3900: T6394: extend functionalities in firewall; move netfilter sysctl ↵	Nicolas Fort
	timeout parameters defined in conntrack to firewall global-opton section.
2024-04-15	T5535: firewall: migrate command <set system ip disable-directed-broadcast> ↵	Nicolas Fort
	to firewall global-optinos
2023-12-26	firewall: T5834: Migration for 'enable-default-log' to 'default-log'	Indrajit Raychaudhuri

2023-11-10	T5729: firewall: switch to valueless in order to remove unnecessary ↵	Nicolas Fort
	<enable\|disable> commands; log and state moved to new syntax.
2023-11-07	T5681: firewall: bump firewall cli version to 12, which was missed in last ↵	Nicolas Fort
	change.
2023-08-11	T5160: firewall refactor: new cli structure. Update only all xml	Nicolas Fort

2023-05-08	T4780: bump firewall version 9 -> 10	Christian Breunig

2022-11-19	T4780: Firewall: add firewall groups in firewall. Extend matching criteria ↵	Nicolas Fort
	so this new group can be used in inbound and outbound matcher
2022-09-13	firewall: T2199: Refactor firewall + zone-policy, move interfaces under ↵	sarthurdev
	firewall node * Refactor firewall and zone-policy rule creation and cleanup * Migrate interface firewall values to `firewall interfaces <name> <direction> name/ipv6-name <name>` * Remove `firewall-interface.py` conf script
2022-02-16	xml: T3474: add component version include files	John Estabrook
	Add the include files containing the syntaxVersion element defining the version of the respective component; these files are included by the top level file 'xml-component-versions.xml.in'. Processing of these elements was previously added to the python xml lib in commit 40f5359d. This will replace the use of 'curver_DATA' in vyatta-cfg-system and other legacy packages.