summaryrefslogtreecommitdiff
path: root/templates/firewall/group/address-group/node.def
diff options
context:
space:
mode:
authorJames Davidson <james.davidson@vyatta.com>2013-05-21 17:57:25 -0700
committerJames Davidson <james.davidson@vyatta.com>2013-05-22 16:47:05 -0700
commit9339770e2f8a874c4f9befa05613c842f2b9b3a9 (patch)
treed9680ebc8316ed6e714b3997a83a8d0364739105 /templates/firewall/group/address-group/node.def
parentebd75fd25ddede4a6797ebe5a9f4c0195d1dce17 (diff)
downloadvyatta-cfg-firewall-9339770e2f8a874c4f9befa05613c842f2b9b3a9.tar.gz
vyatta-cfg-firewall-9339770e2f8a874c4f9befa05613c842f2b9b3a9.zip
Enable generation of SNMP traps on firewall config changes
Adds call to vyatta-firewall-trap.pl to end action of firewall nodes.
Diffstat (limited to 'templates/firewall/group/address-group/node.def')
-rw-r--r--templates/firewall/group/address-group/node.def6
1 files changed, 4 insertions, 2 deletions
diff --git a/templates/firewall/group/address-group/node.def b/templates/firewall/group/address-group/node.def
index 5b2e510..13b2e72 100644
--- a/templates/firewall/group/address-group/node.def
+++ b/templates/firewall/group/address-group/node.def
@@ -15,5 +15,7 @@ syntax:expression: pattern $VAR(@) "^[^!]" ; \
syntax:expression: pattern $VAR(@) "^[^|;&$<>]*$" ; \
"Firewall group name cannot contain shell punctuation"
-end: sudo /opt/vyatta/sbin/vyatta-ipset.pl --action=update-set \
- --set-name="$VAR(@)" --set-type=address
+end: if sudo /opt/vyatta/sbin/vyatta-ipset.pl --action=update-set \
+ --set-name="$VAR(@)" --set-type=address; then
+ ${vyatta_sbindir}/vyatta-firewall-trap.pl --level="firewall group address-group $VAR(@)"
+ fi