summaryrefslogtreecommitdiff
path: root/templates/firewall/ipv6-name/node.def
blob: d60808be26cd1c04a0fb473aa6ea5d25d6b221c7 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
tag:

type: txt

syntax:expression: exec "			                  \
        if [ `echo -n '$VAR(@)' | wc -c` -gt 29 ]; then         \
          echo  firewall ipv6-name must be 29 characters or less; \
          exit 1 ;                                                \
        fi ; "

syntax:expression: pattern $VAR(@) "^[^-]" ; "Firewall rule set name cannot start with \"-\""

syntax:expression: pattern $VAR(@) "^[^;]*$" ; "Firewall rule set name cannot contain ';'"

syntax:expression: pattern $VAR(@) "^[^VZONE]" ; "Firewall rule set name cannot start with \"VZONE\""

end: if sudo /opt/vyatta/sbin/vyatta-firewall.pl --update-rules ipv6-name "$VAR(@)" ;
     then
       if [ ${COMMIT_ACTION} = 'DELETE' ] ; 
       then
          if sudo /opt/vyatta/sbin/vyatta-firewall.pl --teardown-ok ipv6-name ; 
          then
             sudo /opt/vyatta/sbin/vyatta-firewall.pl --teardown ipv6-name
          fi
       fi
     else
       exit 1;
     fi

create: sudo /opt/vyatta/sbin/vyatta-firewall.pl --setup ip6tables ipv6-name

help: Set IPv6 firewall rule set name