diff options
| author | Daniil Baturin <daniil@baturin.org> | 2018-03-12 18:28:32 +0700 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2018-03-12 18:28:32 +0700 |
| commit | 98d47b93bbac7abcc26f073329d4f1180deb47c1 (patch) | |
| tree | 84a8a5e0fcb6d98b73880f3afd5a1567883679a0 /templates/firewall/ipv6-group/address-group/node.def | |
| parent | 4c12861706e5a9d6f500dd00c71ad58e9c7375c1 (diff) | |
| parent | 4e3ea201d7902d9a0641bbecf42d7e837595e01b (diff) | |
| download | vyatta-cfg-firewall-98d47b93bbac7abcc26f073329d4f1180deb47c1.tar.gz vyatta-cfg-firewall-98d47b93bbac7abcc26f073329d4f1180deb47c1.zip | |
Merge pull request #7 from mtudosoiu/current
Task T35 - add support for IPv6 firewall adddress and network groups
Diffstat (limited to 'templates/firewall/ipv6-group/address-group/node.def')
| -rw-r--r-- | templates/firewall/ipv6-group/address-group/node.def | 25 |
1 files changed, 25 insertions, 0 deletions
diff --git a/templates/firewall/ipv6-group/address-group/node.def b/templates/firewall/ipv6-group/address-group/node.def new file mode 100644 index 0000000..b61f784 --- /dev/null +++ b/templates/firewall/ipv6-group/address-group/node.def @@ -0,0 +1,25 @@ +tag: +priority: 200 +type: txt +help: Firewall address-group + +syntax:expression: pattern $VAR(@) "^[[:graph:]]{1,31}$" ; \ + "Firewall group name must be 31 characters or less" + +syntax:expression: pattern $VAR(@) "^[^-]" ; \ + "Firewall group name cannot start with \"-\"" + +syntax:expression: pattern $VAR(@) "^[^!]" ; \ + "Firewall group name cannot start with \"!\"" + +syntax:expression: pattern $VAR(@) "^[^|;&$<>]*$" ; \ + "Firewall group name cannot contain shell punctuation" + +syntax:expression: exec "/opt/vyatta/sbin/vyatta-ipset.pl --action=is-group-defined --set-name=$VAR(@) \ + --set-type=address --set-family=inet6"; \ + "Firewall group name already used as Ipv4 group address" + +end: if sudo /opt/vyatta/sbin/vyatta-ipset.pl --action=update-set \ + --set-name="$VAR(@)" --set-type=address --set-family=inet6; then + ${vyatta_sbindir}/vyatta-firewall-trap.pl --level="firewall group address-group $VAR(@)" + fi |