From 343ee77290bb4e73d7fd12e6d0fb8c3fc38a28a1 Mon Sep 17 00:00:00 2001
From: Stig Thormodsrud <stig@vyatta.com>
Date: Fri, 1 Feb 2008 10:15:32 -0800
Subject: Add firewall node to tunnel interface

---
 .../tunnel/node.tag/firewall/in/name/node.def          | 18 ++++++++++++++++++
 .../interfaces/tunnel/node.tag/firewall/in/node.def    |  1 +
 .../tunnel/node.tag/firewall/local/name/node.def       | 18 ++++++++++++++++++
 .../interfaces/tunnel/node.tag/firewall/local/node.def |  1 +
 templates/interfaces/tunnel/node.tag/firewall/node.def |  1 +
 .../tunnel/node.tag/firewall/out/name/node.def         | 18 ++++++++++++++++++
 .../interfaces/tunnel/node.tag/firewall/out/node.def   |  1 +
 .../node.tag/vif/node.tag/firewall/in/name/node.def    | 18 ++++++++++++++++++
 .../tunnel/node.tag/vif/node.tag/firewall/in/node.def  |  1 +
 .../node.tag/vif/node.tag/firewall/local/name/node.def | 17 +++++++++++++++++
 .../node.tag/vif/node.tag/firewall/local/node.def      |  1 +
 .../tunnel/node.tag/vif/node.tag/firewall/node.def     |  1 +
 .../node.tag/vif/node.tag/firewall/out/name/node.def   | 17 +++++++++++++++++
 .../tunnel/node.tag/vif/node.tag/firewall/out/node.def |  1 +
 14 files changed, 114 insertions(+)
 create mode 100644 templates/interfaces/tunnel/node.tag/firewall/in/name/node.def
 create mode 100644 templates/interfaces/tunnel/node.tag/firewall/in/node.def
 create mode 100644 templates/interfaces/tunnel/node.tag/firewall/local/name/node.def
 create mode 100644 templates/interfaces/tunnel/node.tag/firewall/local/node.def
 create mode 100644 templates/interfaces/tunnel/node.tag/firewall/node.def
 create mode 100644 templates/interfaces/tunnel/node.tag/firewall/out/name/node.def
 create mode 100644 templates/interfaces/tunnel/node.tag/firewall/out/node.def
 create mode 100644 templates/interfaces/tunnel/node.tag/vif/node.tag/firewall/in/name/node.def
 create mode 100644 templates/interfaces/tunnel/node.tag/vif/node.tag/firewall/in/node.def
 create mode 100644 templates/interfaces/tunnel/node.tag/vif/node.tag/firewall/local/name/node.def
 create mode 100644 templates/interfaces/tunnel/node.tag/vif/node.tag/firewall/local/node.def
 create mode 100644 templates/interfaces/tunnel/node.tag/vif/node.tag/firewall/node.def
 create mode 100644 templates/interfaces/tunnel/node.tag/vif/node.tag/firewall/out/name/node.def
 create mode 100644 templates/interfaces/tunnel/node.tag/vif/node.tag/firewall/out/node.def

(limited to 'templates')

diff --git a/templates/interfaces/tunnel/node.tag/firewall/in/name/node.def b/templates/interfaces/tunnel/node.tag/firewall/in/name/node.def
new file mode 100644
index 0000000..290e726
--- /dev/null
+++ b/templates/interfaces/tunnel/node.tag/firewall/in/name/node.def
@@ -0,0 +1,18 @@
+type: txt
+
+help: Inbound interface filter name
+
+create:expression: "sh -c \"echo create eth=[$VAR(../../../@)] dir=[$VAR(..)] name=[$VAR(@)] \
+>> /tmp/cli.log && \
+sudo /opt/vyatta/sbin/vyatta-firewall.pl \
+--update-interfaces update $VAR(../../../@) $VAR(..) $VAR(@)\" "
+
+update:expression: "sh -c \"echo update eth=[$VAR(../../../@)] dir=[$VAR(..)] name=[$VAR(@)] \
+>> /tmp/cli.log && \
+sudo /opt/vyatta/sbin/vyatta-firewall.pl \
+--update-interfaces update $VAR(../../../@) $VAR(..) $VAR(@)\" "
+
+delete:expression: "sh -c \"echo delete eth=[$VAR(../../../@)] dir=[$VAR(..)] name=[$VAR(@)] \
+>> /tmp/cli.log && \
+sudo /opt/vyatta/sbin/vyatta-firewall.pl \
+--update-interfaces delete $VAR(../../../@) $VAR(..) $VAR(@)\" "
diff --git a/templates/interfaces/tunnel/node.tag/firewall/in/node.def b/templates/interfaces/tunnel/node.tag/firewall/in/node.def
new file mode 100644
index 0000000..7a9f156
--- /dev/null
+++ b/templates/interfaces/tunnel/node.tag/firewall/in/node.def
@@ -0,0 +1 @@
+help: Filter forwarded packets on inbound interface
diff --git a/templates/interfaces/tunnel/node.tag/firewall/local/name/node.def b/templates/interfaces/tunnel/node.tag/firewall/local/name/node.def
new file mode 100644
index 0000000..5bd9cd6
--- /dev/null
+++ b/templates/interfaces/tunnel/node.tag/firewall/local/name/node.def
@@ -0,0 +1,18 @@
+type: txt
+
+help: Local filter name
+
+create:expression: "sh -c \"echo create eth=[$VAR(../../../@)] dir=[$VAR(..)] name=[$VAR(@)] \
+>> /tmp/cli.log && \
+sudo /opt/vyatta/sbin/vyatta-firewall.pl \
+--update-interfaces update $VAR(../../../@) $VAR(..) $VAR(@)\" "
+
+update:expression: "sh -c \"echo update eth=[$VAR(../../../@)] dir=[$VAR(..)] name=[$VAR(@)] \
+>> /tmp/cli.log && \
+sudo /opt/vyatta/sbin/vyatta-firewall.pl \
+--update-interfaces update $VAR(../../../@) $VAR(..) $VAR(@)\" "
+
+delete:expression: "sh -c \"echo delete eth=[$VAR(../../../@)] dir=[$VAR(..)] name=[$VAR(@)] \
+>> /tmp/cli.log && \
+sudo /opt/vyatta/sbin/vyatta-firewall.pl \
+--update-interfaces delete $VAR(../../../@) $VAR(..) $VAR(@)\" "
diff --git a/templates/interfaces/tunnel/node.tag/firewall/local/node.def b/templates/interfaces/tunnel/node.tag/firewall/local/node.def
new file mode 100644
index 0000000..eb0ccdf
--- /dev/null
+++ b/templates/interfaces/tunnel/node.tag/firewall/local/node.def
@@ -0,0 +1 @@
+help: Filter packets destined for this router
diff --git a/templates/interfaces/tunnel/node.tag/firewall/node.def b/templates/interfaces/tunnel/node.tag/firewall/node.def
new file mode 100644
index 0000000..7778775
--- /dev/null
+++ b/templates/interfaces/tunnel/node.tag/firewall/node.def
@@ -0,0 +1 @@
+help: Configure firewall options
diff --git a/templates/interfaces/tunnel/node.tag/firewall/out/name/node.def b/templates/interfaces/tunnel/node.tag/firewall/out/name/node.def
new file mode 100644
index 0000000..0086f38
--- /dev/null
+++ b/templates/interfaces/tunnel/node.tag/firewall/out/name/node.def
@@ -0,0 +1,18 @@
+type: txt
+
+help: Outbound interface filter name
+
+create:expression: "sh -c \"echo create eth=[$VAR(../../../@)] dir=[$VAR(..)] name=[$VAR(@)] \
+>> /tmp/cli.log && \
+sudo /opt/vyatta/sbin/vyatta-firewall.pl \
+--update-interfaces update $VAR(../../../@) $VAR(..) $VAR(@)\" "
+
+update:expression: "sh -c \"echo update eth=[$VAR(../../../@)] dir=[$VAR(..)] name=[$VAR(@)] \
+>> /tmp/cli.log && \
+sudo /opt/vyatta/sbin/vyatta-firewall.pl \
+--update-interfaces update $VAR(../../../@) $VAR(..) $VAR(@)\" "
+
+delete:expression: "sh -c \"echo delete eth=[$VAR(../../../@)] dir=[$VAR(..)] name=[$VAR(@)] \
+>> /tmp/cli.log && \
+sudo /opt/vyatta/sbin/vyatta-firewall.pl \
+--update-interfaces delete $VAR(../../../@) $VAR(..) $VAR(@)\" "
diff --git a/templates/interfaces/tunnel/node.tag/firewall/out/node.def b/templates/interfaces/tunnel/node.tag/firewall/out/node.def
new file mode 100644
index 0000000..4cf0682
--- /dev/null
+++ b/templates/interfaces/tunnel/node.tag/firewall/out/node.def
@@ -0,0 +1 @@
+help: Filter forwarded packets on outbound interface
diff --git a/templates/interfaces/tunnel/node.tag/vif/node.tag/firewall/in/name/node.def b/templates/interfaces/tunnel/node.tag/vif/node.tag/firewall/in/name/node.def
new file mode 100644
index 0000000..ade7e78
--- /dev/null
+++ b/templates/interfaces/tunnel/node.tag/vif/node.tag/firewall/in/name/node.def
@@ -0,0 +1,18 @@
+type: txt
+
+help: Inbound interface filter name
+
+create:expression: "sh -c \"echo create eth=[$VAR(../../../../@)] vif=[$VAR(../../../@)] \
+dir=[$VAR(..)] name=[$VAR(@)] >> /tmp/cli.log && \
+sudo /opt/vyatta/sbin/vyatta-firewall.pl \
+--update-interfaces update $VAR(../../../../@).$VAR(../../../@) $VAR(..) $VAR(@)\" "
+
+update:expression: "sh -c \"echo update eth=[$VAR(../../../../@)] vif=[$VAR(../../../@)] \
+dir=[$VAR(..)] name=[$VAR(@)] >> /tmp/cli.log && \
+sudo /opt/vyatta/sbin/vyatta-firewall.pl \
+--update-interfaces update $VAR(../../../../@).$VAR(../../../@) $VAR(..) $VAR(@)\" "
+
+delete:expression: "sh -c \"echo delete eth=[$VAR(../../../../@)] vif=[$VAR(../../../@)] \
+dir=[$VAR(..)] name=[$VAR(@)] >> /tmp/cli.log && \
+sudo /opt/vyatta/sbin/vyatta-firewall.pl \
+--update-interfaces delete $VAR(../../../../@).$VAR(../../../@) $VAR(..) $VAR(@)\" "
diff --git a/templates/interfaces/tunnel/node.tag/vif/node.tag/firewall/in/node.def b/templates/interfaces/tunnel/node.tag/vif/node.tag/firewall/in/node.def
new file mode 100644
index 0000000..7a9f156
--- /dev/null
+++ b/templates/interfaces/tunnel/node.tag/vif/node.tag/firewall/in/node.def
@@ -0,0 +1 @@
+help: Filter forwarded packets on inbound interface
diff --git a/templates/interfaces/tunnel/node.tag/vif/node.tag/firewall/local/name/node.def b/templates/interfaces/tunnel/node.tag/vif/node.tag/firewall/local/name/node.def
new file mode 100644
index 0000000..4089ab1
--- /dev/null
+++ b/templates/interfaces/tunnel/node.tag/vif/node.tag/firewall/local/name/node.def
@@ -0,0 +1,17 @@
+type: txt
+
+help: Local filter name
+
+create:expression: "sh -c \"echo create eth=[$VAR(../../../../@)] vif=[$VAR(../../../@)] \        dir=[$VAR(..)] name=[$VAR(@)] >> /tmp/cli.log && \
+sudo /opt/vyatta/sbin/vyatta-firewall.pl \
+--update-interfaces update $VAR(../../../../@).$VAR(../../../@) $VAR(..) $VAR(@)\" "
+
+update:expression: "sh -c \"echo update eth=[$VAR(../../../../@)] vif=[$VAR(../../../@)] \
+dir=[$VAR(..)] name=[$VAR(@)] >> /tmp/cli.log && \
+sudo /opt/vyatta/sbin/vyatta-firewall.pl \
+--update-interfaces update $VAR(../../../../@).$VAR(../../../@) $VAR(..) $VAR(@)\" "
+
+delete:expression: "sh -c \"echo delete eth=[$VAR(../../../../@)] vif=[$VAR(../../../@)] \
+dir=[$VAR(..)] name=[$VAR(@)] >> /tmp/cli.log && \
+sudo /opt/vyatta/sbin/vyatta-firewall.pl \
+--update-interfaces delete $VAR(../../../../@).$VAR(../../../@) $VAR(..) $VAR(@)\" "
diff --git a/templates/interfaces/tunnel/node.tag/vif/node.tag/firewall/local/node.def b/templates/interfaces/tunnel/node.tag/vif/node.tag/firewall/local/node.def
new file mode 100644
index 0000000..eb0ccdf
--- /dev/null
+++ b/templates/interfaces/tunnel/node.tag/vif/node.tag/firewall/local/node.def
@@ -0,0 +1 @@
+help: Filter packets destined for this router
diff --git a/templates/interfaces/tunnel/node.tag/vif/node.tag/firewall/node.def b/templates/interfaces/tunnel/node.tag/vif/node.tag/firewall/node.def
new file mode 100644
index 0000000..7778775
--- /dev/null
+++ b/templates/interfaces/tunnel/node.tag/vif/node.tag/firewall/node.def
@@ -0,0 +1 @@
+help: Configure firewall options
diff --git a/templates/interfaces/tunnel/node.tag/vif/node.tag/firewall/out/name/node.def b/templates/interfaces/tunnel/node.tag/vif/node.tag/firewall/out/name/node.def
new file mode 100644
index 0000000..22642a2
--- /dev/null
+++ b/templates/interfaces/tunnel/node.tag/vif/node.tag/firewall/out/name/node.def
@@ -0,0 +1,17 @@
+type: txt
+
+help: Outbound interface filter name
+
+create:expression: "sh -c \"echo create eth=[$VAR(../../../../@)] vif=[$VAR(../../../@)] \        dir=[$VAR(..)] name=[$VAR(@)] >> /tmp/cli.log && \
+sudo /opt/vyatta/sbin/vyatta-firewall.pl \
+--update-interfaces update $VAR(../../../../@).$VAR(../../../@) $VAR(..) $VAR(@)\" "
+
+update:expression: "sh -c \"echo update eth=[$VAR(../../../../@)] vif=[$VAR(../../../@)] \
+dir=[$VAR(..)] name=[$VAR(@)] >> /tmp/cli.log && \
+sudo /opt/vyatta/sbin/vyatta-firewall.pl \
+--update-interfaces update $VAR(../../../../@).$VAR(../../../@) $VAR(..) $VAR(@)\" "
+
+delete:expression: "sh -c \"echo delete eth=[$VAR(../../../../@)] vif=[$VAR(../../../@)] \
+dir=[$VAR(..)] name=[$VAR(@)] >> /tmp/cli.log && \
+sudo /opt/vyatta/sbin/vyatta-firewall.pl \
+--update-interfaces delete $VAR(../../../../@).$VAR(../../../@) $VAR(..) $VAR(@)\" "
diff --git a/templates/interfaces/tunnel/node.tag/vif/node.tag/firewall/out/node.def b/templates/interfaces/tunnel/node.tag/vif/node.tag/firewall/out/node.def
new file mode 100644
index 0000000..4cf0682
--- /dev/null
+++ b/templates/interfaces/tunnel/node.tag/vif/node.tag/firewall/out/node.def
@@ -0,0 +1 @@
+help: Filter forwarded packets on outbound interface
-- 
cgit v1.2.3