diff options
8 files changed, 63 insertions, 0 deletions
diff --git a/templates/firewall/modify/node.tag/rule/node.tag/destination/group/address-group/node.def b/templates/firewall/modify/node.tag/rule/node.tag/destination/group/address-group/node.def new file mode 100644 index 0000000..89544cf --- /dev/null +++ b/templates/firewall/modify/node.tag/rule/node.tag/destination/group/address-group/node.def @@ -0,0 +1,11 @@ +type: txt +help: Set group of addresses + +syntax:expression: exec "sudo /opt/vyatta/sbin/vyatta-ipset.pl \ + --action=check-set-type \ + --set-name=$VAR(@) \ + --set-type=address;" + +allowed: local -a array + array=( /opt/vyatta/config/active/firewall/group/address-group/* ) + echo -n ${array[@]##*/} diff --git a/templates/firewall/modify/node.tag/rule/node.tag/destination/group/network-group/node.def b/templates/firewall/modify/node.tag/rule/node.tag/destination/group/network-group/node.def new file mode 100644 index 0000000..30fe5e1 --- /dev/null +++ b/templates/firewall/modify/node.tag/rule/node.tag/destination/group/network-group/node.def @@ -0,0 +1,10 @@ +type: txt +help: Set group of networks + +syntax:expression: exec "sudo /opt/vyatta/sbin/vyatta-ipset.pl \ + --action=check-set-type \ + --set-name=$VAR(@) \ + --set-type=network;" +allowed: local -a array + array=( /opt/vyatta/config/active/firewall/group/network-group/* ) + echo -n ${array[@]##*/} diff --git a/templates/firewall/modify/node.tag/rule/node.tag/destination/group/node.def b/templates/firewall/modify/node.tag/rule/node.tag/destination/group/node.def new file mode 100644 index 0000000..f3d9347 --- /dev/null +++ b/templates/firewall/modify/node.tag/rule/node.tag/destination/group/node.def @@ -0,0 +1 @@ +help: Set group to match diff --git a/templates/firewall/modify/node.tag/rule/node.tag/destination/group/port-group/node.def b/templates/firewall/modify/node.tag/rule/node.tag/destination/group/port-group/node.def new file mode 100644 index 0000000..6bab1c7 --- /dev/null +++ b/templates/firewall/modify/node.tag/rule/node.tag/destination/group/port-group/node.def @@ -0,0 +1,10 @@ +type: txt +help: Set group of ports + +syntax:expression: exec "sudo /opt/vyatta/sbin/vyatta-ipset.pl \ + --action=check-set-type \ + --set-name=$VAR(@) \ + --set-type=port;" +allowed: local -a array + array=( /opt/vyatta/config/active/firewall/group/port-group/* ) + echo -n ${array[@]##*/} diff --git a/templates/firewall/modify/node.tag/rule/node.tag/source/group/address-group/node.def b/templates/firewall/modify/node.tag/rule/node.tag/source/group/address-group/node.def new file mode 100644 index 0000000..d652898 --- /dev/null +++ b/templates/firewall/modify/node.tag/rule/node.tag/source/group/address-group/node.def @@ -0,0 +1,10 @@ +type: txt +help: Set group of addresses + +syntax:expression: exec "sudo /opt/vyatta/sbin/vyatta-ipset.pl \ + --action=check-set-type \ + --set-name=$VAR(@) \ + --set-type=address;" +allowed: local -a array + array=( /opt/vyatta/config/active/firewall/group/address-group/* ) + echo -n ${array[@]##*/} diff --git a/templates/firewall/modify/node.tag/rule/node.tag/source/group/network-group/node.def b/templates/firewall/modify/node.tag/rule/node.tag/source/group/network-group/node.def new file mode 100644 index 0000000..30fe5e1 --- /dev/null +++ b/templates/firewall/modify/node.tag/rule/node.tag/source/group/network-group/node.def @@ -0,0 +1,10 @@ +type: txt +help: Set group of networks + +syntax:expression: exec "sudo /opt/vyatta/sbin/vyatta-ipset.pl \ + --action=check-set-type \ + --set-name=$VAR(@) \ + --set-type=network;" +allowed: local -a array + array=( /opt/vyatta/config/active/firewall/group/network-group/* ) + echo -n ${array[@]##*/} diff --git a/templates/firewall/modify/node.tag/rule/node.tag/source/group/node.def b/templates/firewall/modify/node.tag/rule/node.tag/source/group/node.def new file mode 100644 index 0000000..f3d9347 --- /dev/null +++ b/templates/firewall/modify/node.tag/rule/node.tag/source/group/node.def @@ -0,0 +1 @@ +help: Set group to match diff --git a/templates/firewall/modify/node.tag/rule/node.tag/source/group/port-group/node.def b/templates/firewall/modify/node.tag/rule/node.tag/source/group/port-group/node.def new file mode 100644 index 0000000..6bab1c7 --- /dev/null +++ b/templates/firewall/modify/node.tag/rule/node.tag/source/group/port-group/node.def @@ -0,0 +1,10 @@ +type: txt +help: Set group of ports + +syntax:expression: exec "sudo /opt/vyatta/sbin/vyatta-ipset.pl \ + --action=check-set-type \ + --set-name=$VAR(@) \ + --set-type=port;" +allowed: local -a array + array=( /opt/vyatta/config/active/firewall/group/port-group/* ) + echo -n ${array[@]##*/} |