From 38511df4b376f8ec5eee9af55df92f96cab0a0cf Mon Sep 17 00:00:00 2001 From: Nicolas Fort Date: Wed, 18 Sep 2024 14:07:24 +0000 Subject: T6723: firewall: extend op-mode commands and a in order to match all chains/priorities --- op-mode-definitions/firewall.xml.in | 220 ++++++++++++++++++++++++++++++++++++ op-mode-definitions/show-log.xml.in | 125 ++++++++++++++++++++ 2 files changed, 345 insertions(+) mode change 100644 => 100755 op-mode-definitions/firewall.xml.in mode change 100644 => 100755 op-mode-definitions/show-log.xml.in (limited to 'op-mode-definitions') diff --git a/op-mode-definitions/firewall.xml.in b/op-mode-definitions/firewall.xml.in old mode 100644 new mode 100755 index b6ce5bae2..82e6c8668 --- a/op-mode-definitions/firewall.xml.in +++ b/op-mode-definitions/firewall.xml.in @@ -98,6 +98,138 @@ + + + Show bridge input firewall ruleset + + + + + Show bridge input filter firewall ruleset + + + + + Show list view of bridge input filter firewall rules + + firewall bridge input filter detail + + + sudo ${vyos_op_scripts_dir}/firewall.py --action show --family $3 --hook $4 --priority $5 --detail $6 + + + + Show summary of bridge input filter firewall rules + + firewall bridge input filter rule + + + + + + Show list view of specific bridge input filter firewall rule + + firewall bridge input filter detail + + + sudo ${vyos_op_scripts_dir}/firewall.py --action show --family $3 --hook $4 --priority $5 --rule $7 --detail $8 + + + sudo ${vyos_op_scripts_dir}/firewall.py --action show --family $3 --hook $4 --priority $5 --rule $7 + + + sudo ${vyos_op_scripts_dir}/firewall.py --action show --family $3 --hook $4 --priority $5 + + + + + + Show bridge output firewall ruleset + + + + + Show bridge output filter firewall ruleset + + + + + Show list view of bridge output filter firewall rules + + firewall bridge output filter detail + + + sudo ${vyos_op_scripts_dir}/firewall.py --action show --family $3 --hook $4 --priority $5 --detail $6 + + + + Show summary of bridge output filter firewall rules + + firewall bridge output filter rule + + + + + + Show list view of specific bridge output filter firewall rule + + firewall bridge output filter detail + + + sudo ${vyos_op_scripts_dir}/firewall.py --action show --family $3 --hook $4 --priority $5 --rule $7 --detail $8 + + + sudo ${vyos_op_scripts_dir}/firewall.py --action show --family $3 --hook $4 --priority $5 --rule $7 + + + sudo ${vyos_op_scripts_dir}/firewall.py --action show --family $3 --hook $4 --priority $5 + + + + + + Show bridge prerouting firewall ruleset + + + + + Show bridge prerouting filter firewall ruleset + + + + + Show list view of bridge prerouting filter firewall rules + + firewall bridge prerouting filter detail + + + sudo ${vyos_op_scripts_dir}/firewall.py --action show --family $3 --hook $4 --priority $5 --detail $6 + + + + Show summary of bridge prerouting filter firewall rules + + firewall bridge prerouting filter rule + + + + + + Show list view of specific bridge prerouting filter firewall rule + + firewall bridge prerouting filter detail + + + sudo ${vyos_op_scripts_dir}/firewall.py --action show --family $3 --hook $4 --priority $5 --rule $7 --detail $8 + + + sudo ${vyos_op_scripts_dir}/firewall.py --action show --family $3 --hook $4 --priority $5 --rule $7 + + + sudo ${vyos_op_scripts_dir}/firewall.py --action show --family $3 --hook $4 --priority $5 + + + Show bridge custom firewall chains @@ -278,6 +410,50 @@ + + + Show IPv6 prerouting firewall ruleset + + + + + Show IPv6 prerouting raw firewall ruleset + + + + + Show list view of IPv6 prerouting raw firewall ruleset + + firewall ipv6 prerouting raw detail + + + sudo ${vyos_op_scripts_dir}/firewall.py --action show --family $3 --hook $4 --priority $5 --detail $6 + + + + Show summary of IPv6 prerouting raw firewall rules + + firewall ipv6 prerouting raw rule + + + + + + Show list view of IPv6 prerouting raw firewall rules + + firewall ipv6 prerouting raw rule detail + + + sudo ${vyos_op_scripts_dir}/firewall.py --action show --family $3 --hook $4 --priority $5 --rule $7 --detail $8 + + + sudo ${vyos_op_scripts_dir}/firewall.py --action show --family $3 --hook $4 --priority $5 --rule $7 + + + sudo ${vyos_op_scripts_dir}/firewall.py --action show --family $3 --hook $4 --priority $5 + + + Show IPv6 custom firewall chains @@ -458,6 +634,50 @@ + + + Show IPv4 prerouting firewall ruleset + + + + + Show IPv4 prerouting raw firewall ruleset + + + + + Show list view of IPv4 prerouting raw firewall ruleset + + firewall ipv4 prerouting raw detail + + + sudo ${vyos_op_scripts_dir}/firewall.py --action show --family $3 --hook $4 --priority $5 --detail $6 + + + + Show summary of IPv4 prerouting raw firewall rules + + firewall ipv4 prerouting raw rule + + + + + + Show list view of IPv4 prerouting raw firewall rules + + firewall ipv4 prerouting raw rule detail + + + sudo ${vyos_op_scripts_dir}/firewall.py --action show --family $3 --hook $4 --priority $5 --rule $7 --detail $8 + + + sudo ${vyos_op_scripts_dir}/firewall.py --action show --family $3 --hook $4 --priority $5 --rule $7 + + + sudo ${vyos_op_scripts_dir}/firewall.py --action show --family $3 --hook $4 --priority $5 + + + Show IPv4 custom firewall chains diff --git a/op-mode-definitions/show-log.xml.in b/op-mode-definitions/show-log.xml.in old mode 100644 new mode 100755 index f0fad63d2..c2504686d --- a/op-mode-definitions/show-log.xml.in +++ b/op-mode-definitions/show-log.xml.in @@ -172,6 +172,81 @@ + + + Show Bridge input firewall log + + journalctl --no-hostname --boot -k | grep bri-INP + + + + Show Bridge firewall input filter + + journalctl --no-hostname --boot -k | grep bri-INP-filter + + + + Show log for a rule in the specified firewall + + firewall bridge input filter rule + + + journalctl --no-hostname --boot -k | egrep "\[bri-INP-filter-$8-[ADRJC]\]" + + + + + + + + Show Bridge output firewall log + + journalctl --no-hostname --boot -k | grep bri-OUT + + + + Show Bridge firewall output filter + + journalctl --no-hostname --boot -k | grep bri-OUT-filter + + + + Show log for a rule in the specified firewall + + firewall bridge output filter rule + + + journalctl --no-hostname --boot -k | egrep "\[bri-OUT-filter-$8-[ADRJC]\]" + + + + + + + + Show Bridge prerouting firewall log + + journalctl --no-hostname --boot -k | grep bri-PRE + + + + Show Bridge firewall prerouting filter + + journalctl --no-hostname --boot -k | grep bri-PRE-filter + + + + Show log for a rule in the specified firewall + + firewall bridge prerouting filter rule + + + journalctl --no-hostname --boot -k | egrep "\[bri-PRE-filter-$8-[ADRJC]\]" + + + + + Show custom Bridge firewall log @@ -295,6 +370,31 @@ + + + Show firewall IPv4 prerouting log + + journalctl --no-hostname --boot -k | grep ipv4-PRE + + + + Show firewall IPv4 prerouting raw log + + journalctl --no-hostname --boot -k | grep ipv4-PRE-raw + + + + Show log for a rule in the specified firewall + + firewall ipv4 prerouting raw rule + + + journalctl --no-hostname --boot -k | egrep "\[ipv4-PRE-raw-$8-[ADRJC]\]" + + + + + @@ -398,6 +498,31 @@ + + + Show firewall IPv6 prerouting log + + journalctl --no-hostname --boot -k | grep ipv6-PRE + + + + Show firewall IPv6 prerouting raw log + + journalctl --no-hostname --boot -k | grep ipv6-PRE-raw + + + + Show log for a rule in the specified firewall + + firewall ipv6 prerouting raw rule + + + journalctl --no-hostname --boot -k | egrep "\[ipv6-PRE-raw-$8-[ADRJC]\]" + + + + + -- cgit v1.2.3