From 37cfa8cdb1c6a1d395109aabd3ee29e83db151da Mon Sep 17 00:00:00 2001
From: Nicolas Fort <nicolasfort1988@gmail.com>
Date: Sat, 27 Aug 2022 15:35:52 +0000
Subject: Firewall: T4651: Add options to match packet size on firewall rules.

---
 interface-definitions/firewall.xml.in | 40 +++++++++++++++++++++++++++++++++++
 1 file changed, 40 insertions(+)

(limited to 'interface-definitions/firewall.xml.in')

diff --git a/interface-definitions/firewall.xml.in b/interface-definitions/firewall.xml.in
index 2e9452dfd..f838f1b88 100644
--- a/interface-definitions/firewall.xml.in
+++ b/interface-definitions/firewall.xml.in
@@ -383,6 +383,26 @@
                 </children>
               </node>
               #include <include/firewall/common-rule.xml.i>
+              <leafNode name="ip-length">
+                <properties>
+                  <help>Payload size in bytes, including any extension header</help>
+                  <valueHelp>
+                    <format>u32:1-65535</format>
+                    <description>Numbered packet length</description>
+                  </valueHelp>
+                  <valueHelp>
+                    <format>&lt;start-end&gt;</format>
+                    <description>Packet length range (e.g. 1001-1005)</description>
+                  </valueHelp>
+                  <valueHelp>
+                    <format> </format>
+                    <description>\n\n  Multiple values can be specified as a comma-separated list.\n  For example: '64, 512,1001-1005'</description>
+                  </valueHelp>
+                  <constraint>
+                    <validator name="ip-length"/>
+                  </constraint>
+                </properties>
+              </leafNode>
               <node name="hop-limit">
                 <properties>
                   <help>Hop Limit</help>
@@ -571,6 +591,26 @@
                 </children>
               </node>
               #include <include/firewall/common-rule.xml.i>
+              <leafNode name="ip-length">
+                <properties>
+                  <help>Packet size in bytes, including header and data</help>
+                  <valueHelp>
+                    <format>u32:1-65535</format>
+                    <description>Numbered packet length</description>
+                  </valueHelp>
+                  <valueHelp>
+                    <format>&lt;start-end&gt;</format>
+                    <description>Packet length range (e.g. 1001-1005)</description>
+                  </valueHelp>
+                  <valueHelp>
+                    <format> </format>
+                    <description>\n\n  Multiple values can be specified as a comma-separated list.\n  For example: '64, 512,1001-1005'</description>
+                  </valueHelp>
+                  <constraint>
+                    <validator name="ip-length"/>
+                  </constraint>
+                </properties>
+              </leafNode>
               <node name="icmp">
                 <properties>
                   <help>ICMP type and code information</help>
-- 
cgit v1.2.3