summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorMohit Mehta <mohit.mehta@vyatta.com>2009-04-07 18:29:43 -0700
committerMohit Mehta <mohit.mehta@vyatta.com>2009-04-07 18:29:43 -0700
commitba445b97862b51e7fd2c8c6452ad813d1afadee8 (patch)
tree783f071ea6408509f51075720c3031c35c124330
parent03ad6e222132da3782a43bda15e11016640b7e47 (diff)
downloadvyatta-cfg-ba445b97862b51e7fd2c8c6452ad813d1afadee8.tar.gz
vyatta-cfg-ba445b97862b51e7fd2c8c6452ad813d1afadee8.zip
add priorities and ranks for zone based firewall
-rwxr-xr-xlib/Vyatta/ConfigLoad.pm4
-rw-r--r--templates/priority2
2 files changed, 6 insertions, 0 deletions
diff --git a/lib/Vyatta/ConfigLoad.pm b/lib/Vyatta/ConfigLoad.pm
index 5769320..c1ea5e7 100755
--- a/lib/Vyatta/ConfigLoad.pm
+++ b/lib/Vyatta/ConfigLoad.pm
@@ -44,6 +44,7 @@ my %config_rank = (
'interfaces bridge' => 990,
'interfaces ethernet' => 980,
'interfaces tunnel' => 910,
+ 'zone-policy zone' => 900,
'system gateway-address' => 890,
'system name-server' => 880,
'system login user' => 870,
@@ -70,6 +71,9 @@ my %regex_rank = (
'protocols bgp \d+ neighbor \d+\.\d+\.\d+\.\d+' => 800,
'protocols bgp \d+ neighbor \w+' => 801,
'interfaces bridge \S* address' => 920,
+ 'zone-policy zone \S* interface' => 899,
+ 'zone-policy zone \S* local-zone' => 899,
+ 'zone-policy zone \S* from' => 898,
);
my @all_nodes = ();
diff --git a/templates/priority b/templates/priority
index 7f0aaf7..7d4aabf 100644
--- a/templates/priority
+++ b/templates/priority
@@ -222,3 +222,5 @@
916 service/telnet
917 service/webproxy
960 cluster
+970 zone-policy/zone/node.tag/from
+975 zone-policy