diff options
| author | Christian Poessinger <christian@poessinger.com> | 2021-04-05 14:42:18 +0200 |
|---|---|---|
| committer | Christian Poessinger <christian@poessinger.com> | 2021-04-05 14:43:13 +0200 |
| commit | 8e1ab2a747a26a3a574c411b95ffb2a3ca7e3854 (patch) | |
| tree | 542e768949cee08272317a038b0839bf1866ad2c | |
| parent | dc80ce45f95e243afc6c3d9016f051cfab690846 (diff) | |
| download | vyatta-cfg-firewall-8e1ab2a747a26a3a574c411b95ffb2a3ca7e3854.tar.gz vyatta-cfg-firewall-8e1ab2a747a26a3a574c411b95ffb2a3ca7e3854.zip | |
T3456: add missing priority when removing per interface firewall rules
This is the second commit for fixing this issue, the first was for the
policy based routing and fixed in commit dc80ce45f95 ("T3456: add missing
priority when deleting interface policy").
set firewall name FOO rule 10 action 'accept'
set interfaces ethernet eth0 firewall local name 'FOO'
commit
This was not able to be removed again in one commit, two commits are required.
vyos@r4-roll# delete firewall
[edit]
vyos@r4-roll# delete interfaces ethernet eth0 firewall
[edit]
vyos@r4-roll# commit
[ firewall name FOO ]
Firewall configuration error: Cannot delete rule set "FOO" (still in use)
delete [ firewall name FOO ] failed
delete [ firewall ] failed
Commit failed
[edit]
vyos@r4-roll#
| -rwxr-xr-x | gen-interface-templates.pl | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/gen-interface-templates.pl b/gen-interface-templates.pl index 9e8db61..9979de3 100755 --- a/gen-interface-templates.pl +++ b/gen-interface-templates.pl @@ -136,6 +136,7 @@ sub gen_firewall_template { print $tp "priority: $interface_prio{ $if_tree }\n"; } print $tp "help: Firewall options\n"; + print $tp "priority: 615\n"; die "ERROR: No firewall hash for ${if_tree}" unless $firewall_hash{"${if_tree}"}; print $tp 'end: ${vyatta_sbindir}/vyatta-firewall-trap.pl --level="interfaces '; print $tp $firewall_hash{"${if_tree}"} . ' firewall"' . "\n"; |
