diff options
| author | Christian Poessinger <christian@poessinger.com> | 2022-09-23 07:31:58 +0200 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2022-09-23 07:31:58 +0200 |
| commit | 2bc88186b952e32bcf26419af2563c6f1bd7daac (patch) | |
| tree | 76c0e49c9149586f29630a457bf4854a26507d3e /templates/firewall | |
| parent | 6de742432786b4035842d3e3f2e4a10df68199f2 (diff) | |
| parent | d55b9e14c14011577354b69cc569d2652d5e31fd (diff) | |
| download | vyatta-cfg-firewall-2bc88186b952e32bcf26419af2563c6f1bd7daac.tar.gz vyatta-cfg-firewall-2bc88186b952e32bcf26419af2563c6f1bd7daac.zip | |
Merge pull request #34 from zdc/T2189-equuleus
ipset: T2189: optimized firewall groups performance
Diffstat (limited to 'templates/firewall')
| -rw-r--r-- | templates/firewall/group/address-group/node.def | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/templates/firewall/group/address-group/node.def b/templates/firewall/group/address-group/node.def index d89233d..b210fc1 100644 --- a/templates/firewall/group/address-group/node.def +++ b/templates/firewall/group/address-group/node.def @@ -19,6 +19,10 @@ syntax:expression: exec "/opt/vyatta/sbin/vyatta-ipset.pl --action=is-group-defi --set-type=address --set-family=inet"; \ "Firewall group name already used as Ipv6 group address" +commit:expression:exec "/opt/vyatta/sbin/vyatta-ipset.pl --action=check-duplicates --set-name=$VAR(@) \ + --set-type=address --set-family=inet"; \ + "There are duplicates inside address-group $VAR(@)" + end: if sudo /opt/vyatta/sbin/vyatta-ipset.pl --action=update-set \ --set-name="$VAR(@)" --set-type=address --set-family=inet; then ${vyatta_sbindir}/vyatta-firewall-trap.pl --level="firewall group address-group $VAR(@)" |