vyos-1x.git - VyOS command definitions, scripts, and utilities (mirror of https://github.com/marekm72/vyos-1x.git)

Age	Commit message (Collapse)	Author
2024-03-10	firewall: T6071: truncate rule description field to 255 characters	Christian Breunig
	(cherry picked from commit 259ef4740413b39da9b122db19c549eeec88114c)
2024-01-11	firewall: T5814: Retain legacy 'accept' behaviour and re-order migration	sarthurdev
	Pre-1.4 firewall 'accept' action acted as a 'return'. This change ensures the migrated rules meet the expected behaviour. This commit also re-orders migrated in/out/local jumps ordered by direction instead of interface. (cherry picked from commit dc542f109460bca6453d1eeba9fe829aea38bb33)
2024-01-02	T5888: fix migration script in order to fit new type-names for icmp and icmpv6.	Nicolas Fort
	(cherry picked from commit 1ccb3e634d45d0d1a8e190297cc0a310cb0069d6)
2023-12-30	firewall: T5834: Migration for 'enable-default-log' to 'default-log'	Indrajit Raychaudhuri
	(cherry picked from commit 7c40b70af9def9242b30d1fc949288d9da2bd027)
2023-12-15	T5575: Update migration scripts for state policy parsing	Nicolas Fort

2023-11-14	T5729: T5590: T5616: backport to sagita fwall marks, fix on firewall logs ↵	Nicolas Fort
	parsing, and migration to valueless node for log and state matchers
2023-11-01	T5681: Firewall,Nat and Nat66: simplified and standarize interface matcher ↵	Nicolas Fort
	firewal, nat and nat66. (cherry picked from commit 51abbc0f1b2ccf4785cf7f29f1fe6f4af6007ee6)
2023-10-20	T5541: firewall: re-add zone-based firewall.	Nicolas Fort

2023-08-11	Merge pull request #2016 from nicolas-fort/T5160	Christian Breunig
	T5160: Firewall refactor
2023-08-11	interface: T5465: adjust-mss: config migration fails if applied to a VLAN or ↵	Christian Breunig
	Q-in-Q interface When migration from 1.3 to 1.4 and a user hat the following configured: options { interface eth0.10{ adjust-mss 1452 adjust-mss6 1432 } } The configuration was wrongly migrated to: interfaces { ethernet eth0.10 { ipv6 { adjust-mss "1432" } ip { adjust-mss "1452" } } Instead of interfaces { ethernet eth0 { vif 10 { ipv6 { adjust-mss "1432" } ip { adjust-mss "1452" } } }
2023-08-11	T5460: remove config-trap from firewall	Nicolas Fort

2023-08-11	T5160: firewall refactor: move <set firewall ipv6 ipv6-name ...> to <set ↵	Nicolas Fort
	firewall ipv6 name ...> . Also fix some unexpected behaviour with geoip.
2023-08-11	T5160: firewall refactor: fix firewall template for correct rule parsing ↵	Nicolas Fort
	that contains fqnd and/or geo-ip in base chains. Fix mig script
2023-08-11	T5160: firewall refactor: change firewall ip to firewall ipv4	Nicolas Fort

2023-08-11	T5160: firewall refactor: new cli structure. Add migration script and update ↵	Nicolas Fort
	smoketest
2023-08-02	T5427: Fix migration script arguments len expects 2 args	Viacheslav Hletenko
	The script's name is always provided as the first argument sys.argv[0] Expected length for argv is 2 (script itself + config file) Change: 'if (len(argv) < 1)' to 'if len(argv) < 2'
2023-03-21	T5050: Firewall: Add log options	Nicolas Fort

2022-11-19	T4780: Firewall: add firewall groups in firewall. Extend matching criteria ↵	Nicolas Fort
	so this new group can be used in inbound and outbound matcher
2022-09-13	zone-policy: T2199: Migrate zone-policy to firewall node	sarthurdev

2022-09-13	firewall: T2199: Refactor firewall + zone-policy, move interfaces under ↵	sarthurdev
	firewall node * Refactor firewall and zone-policy rule creation and cleanup * Migrate interface firewall values to `firewall interfaces <name> <direction> name/ipv6-name <name>` * Remove `firewall-interface.py` conf script
2022-07-05	firewall: T2199: Fix migration when `icmpv6 type` is an integer	sarthurdev

2022-02-04	firewall: T4209: Fix support for rule `recent` matches	sarthurdev

2022-01-28	firewall: T4217: install protocol tcp_udp if port group does not use a protocol	Christian Poessinger

2022-01-21	firewall: T4186: ICMP/v6 migrations	sarthurdev

2022-01-17	firewall: policy: T4178: Migrate and refactor tcp flags	sarthurdev
	* Add support for ECN and CWR flags
2021-12-06	firewall: T2199: Migrate firewall to XML/Python	sarthurdev

2021-08-21	interfaces: T3090: migrate adjust-mss from "firewall options" to "interface" ↵	Christian Poessinger
	level Getting rid of "set firewall options" and move it from: set firewall options interface ethX adjust-mss 1400 set firewall options interface ethX adjust-mss6 1400 to: set interfaces ethernet ethX ip adjust-mss 1400 set interfaces ethernet ethX ipv6 adjust-mss 1400 In addition add an extra option called clamp-mss-to-pmtu instead of a value.