summaryrefslogtreecommitdiff
path: root/templates/firewall/group/address-group/node.def
diff options
context:
space:
mode:
Diffstat (limited to 'templates/firewall/group/address-group/node.def')
-rw-r--r--templates/firewall/group/address-group/node.def4
1 files changed, 4 insertions, 0 deletions
diff --git a/templates/firewall/group/address-group/node.def b/templates/firewall/group/address-group/node.def
index d89233d..b210fc1 100644
--- a/templates/firewall/group/address-group/node.def
+++ b/templates/firewall/group/address-group/node.def
@@ -19,6 +19,10 @@ syntax:expression: exec "/opt/vyatta/sbin/vyatta-ipset.pl --action=is-group-defi
--set-type=address --set-family=inet"; \
"Firewall group name already used as Ipv6 group address"
+commit:expression:exec "/opt/vyatta/sbin/vyatta-ipset.pl --action=check-duplicates --set-name=$VAR(@) \
+ --set-type=address --set-family=inet"; \
+ "There are duplicates inside address-group $VAR(@)"
+
end: if sudo /opt/vyatta/sbin/vyatta-ipset.pl --action=update-set \
--set-name="$VAR(@)" --set-type=address --set-family=inet; then
${vyatta_sbindir}/vyatta-firewall-trap.pl --level="firewall group address-group $VAR(@)"