summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2021-05-25firewall: ICMP code/type: T35691.2.9-S1cruxsrividya0208
Fixed the completion help for icmp code & type which was showing out of range values 0-4294967295 than the allowed values i.e. 0-255 (cherry picked from commit c89cbf844bc2f54fb599ab7bbb7821f3160b7d28)
2021-04-08T3456: add missing priority when removing per interface firewall rulesChristian Poessinger
This is the second commit for fixing this issue, the first was for the policy based routing and fixed in commit dc80ce45f95 ("T3456: add missing priority when deleting interface policy"). set firewall name FOO rule 10 action 'accept' set interfaces ethernet eth0 firewall local name 'FOO' commit This was not able to be removed again in one commit, two commits are required. vyos@r4-roll# delete firewall [edit] vyos@r4-roll# delete interfaces ethernet eth0 firewall [edit] vyos@r4-roll# commit [ firewall name FOO ] Firewall configuration error: Cannot delete rule set "FOO" (still in use) delete [ firewall name FOO ] failed delete [ firewall ] failed Commit failed [edit] vyos@r4-roll# (cherry picked from commit 8e1ab2a747a26a3a574c411b95ffb2a3ca7e3854)
2021-04-08T3456: add missing priority when deleting interface policyChristian Poessinger
set interfaces ethernet eth1 policy route 'LAN-POLICY-BASED-ROUTING' set policy route LAN-POLICY-BASED-ROUTING rule 10 destination set policy route LAN-POLICY-BASED-ROUTING rule 10 disable set policy route LAN-POLICY-BASED-ROUTING rule 10 set table '10' set policy route LAN-POLICY-BASED-ROUTING rule 10 source address '192.168.0.119/32' set policy route LAN-POLICY-BASED-ROUTING rule 20 destination set policy route LAN-POLICY-BASED-ROUTING rule 20 set table '100' set policy route LAN-POLICY-BASED-ROUTING rule 20 source address '192.168.0.240' This was not able to be deleted in only one commit, two commits were required. vyos@vyos# delete policy vyos@vyos# delete interfaces ethernet eth1 policy vyos@vyos# commit [ policy route LAN-POLICY-BASED-ROUTING ] Firewall configuration error: Cannot delete rule set "LAN-POLICY-BASED-ROUTING" (still in use) delete [ policy route LAN-POLICY-BASED-ROUTING ] failed [[]] failed Commit failed copy failed [/opt/vyatta/config/tmp/tmp_7724/work/.unionfs-fuse][/opt/vyatta/config/tmp/new_config_7724/.unionfs-fuse] Failed to generate committed config [edit] vyos@vyos# (cherry picked from commit dc80ce45f95e243afc6c3d9016f051cfab690846)
2021-02-24Update JenkinsfileDaniil Baturin
2020-09-11New release.vyos/1.2.6VyOS Maintainers
2020-07-29firewall: T1241: Check file before delsever-sever
2020-03-09New release.vyos/1.2.5VyOS Maintainers
2019-12-10New release.vyos/1.2.4VyOS Maintainers
2019-09-28Jenkins: import Pipeline from vyos-1x commit bd00ec7Christian Poessinger
2019-06-23T1471: Fix wireguard entry in firewall template generator.Paweł Drewniak
(cherry picked from commit b539e4d327ab928c1309e81dda2878c190f7972c)
2019-05-21Create Jenkinsfile cruxKim Hagen
2019-03-26Merge branch 'current' into cruxDaniil Baturin
2019-03-17T484: Rules can't be deleted from firewall rule sets used in zone policiesJoshua McBeth
(cherry picked from commit 2cd6280b90042efac7c37be4835f70ed06514504)
2019-03-17Revert "Bug #T171 fix Open Task T171 Unable to Delte Rule"Christian Poessinger
This reverts commit d1164b989295016436f20caa709603ec5d85a4d3. (cherry picked from commit 5499f86a9b6702ce1e76d994402299fce3bbbc47)
2019-02-08T484: Rules can't be deleted from firewall rule sets used in zone policiesJoshua McBeth
2019-02-08Revert "Bug #T171 fix Open Task T171 Unable to Delte Rule"Christian Poessinger
This reverts commit d1164b989295016436f20caa709603ec5d85a4d3.
2019-01-29Merge pull request #12 from mevertse/currenthagbard-01
T166: Changed NPTv6 to use NETMAP
2019-01-29Merge branch 'current' of https://github.com/mevertse/vyatta-cfg-firewall ↵Merijn Evertse
into HEAD
2019-01-29T166: Changed NPTv6 to use NETMAPMerijn Evertse
2019-01-26Update changelog.Daniil Baturin
2018-12-31Merge branch 'current' into cruxDaniil Baturin
2018-12-17T1111: use unique recent packet list names in rules.Daniil Baturin
2018-12-17T1111: use unique recent packet list names in rules.Daniil Baturin
2018-12-16T1087: add wireguard to interface template generators.Daniil Baturin
2018-12-16T1087: add wireguard to interface template generators.Daniil Baturin
2018-11-18T573: add support for matching IPv6 hop limit.Daniil Baturin
Patch by Ray Patrick Soucy.
2018-11-18Merge branch 'crux' of https://github.com/vyos/vyatta-cfg-firewall into cruxDaniil Baturin
2018-11-18T573: add support for matching IPv6 hop limit.Daniil Baturin
Patch by Ray Patrick Soucy.
2018-11-14T1006: replace check_prefix_boundary with ipaddrcheck.Daniil Baturin
2018-11-13T1006: replace check_prefix_boundary with ipaddrcheck.Daniil Baturin
2018-11-13T1006: replace check_prefix_boundary with ipaddrcheck.Daniil Baturin
2018-10-28Merge branch 'current' into cruxDaniil Baturin
Conflicts: debian/changelog
2018-10-26T59: Inspect action still exists in firewall and should be removedhagbard
2018-09-28New branch.Daniil Baturin
2018-07-24T666: remove the firewall option from the old VRRP CLI.Daniil Baturin
If left in place, it will create incorrect command definition tree when vyatta-vrrp is removed and cause config loading errors.
2018-06-24T710: remove dependency on vyatta-util.Daniil Baturin
2018-06-22T704: add libsnmp-perl to dependencies until the script is rewritten.Daniil Baturin
2018-04-20Merge pull request #11 from mtudosoiu/currentDaniil Baturin
Task T35 - enable prune-deleted-sets for inet6 family firewall templates
2018-04-19Task T35 - enable prune-deleted-sets for inet6 family firewall templatesMarian Tudosoiu
2018-04-17Merge pull request #10 from mtudosoiu/currentDaniil Baturin
Task T35 - fixing prune_deleted_sets for inet6 family
2018-04-11Task T35 - fixing prune_deleted_sets for inet6 familyMarian Tudosoiu
2018-03-26Merge pull request #9 from mtudosoiu/currentDaniil Baturin
Task T35 change to solve port-group issue
2018-03-26Task T35 - fixing scoping rulesmtudosoiu
2018-03-23Task T35 change to solve port-group issueMarian Tudosoiu
2018-03-16Merge pull request #8 from mtudosoiu/currentDaniil Baturin
Task T35 place ipv6 groups under global group config tree
2018-03-14Task T35 place ipv6 groups under group config treeMarian Tudosoiu
2018-03-14Task T35 place ipv6 groups under group config treemtudosoiu
2018-03-14Task T35 place ipv6 groups under group config treemtudosoiu
2018-03-14Task T35 place ipv6 groups under group config treemtudosoiu
2018-03-14Task T35 place ipv6 groups under group config treemtudosoiu
generated by cgit v1.2.3 (git 2.39.1) at 2024-09-19 08:31:45 +0000