From ba445b97862b51e7fd2c8c6452ad813d1afadee8 Mon Sep 17 00:00:00 2001
From: Mohit Mehta <mohit.mehta@vyatta.com>
Date: Tue, 7 Apr 2009 18:29:43 -0700
Subject: add priorities and ranks for zone based firewall
---
lib/Vyatta/ConfigLoad.pm | 4 ++++
templates/priority | 2 ++
2 files changed, 6 insertions(+)
diff --git a/lib/Vyatta/ConfigLoad.pm b/lib/Vyatta/ConfigLoad.pm
index 5769320..c1ea5e7 100755
--- a/lib/Vyatta/ConfigLoad.pm
+++ b/lib/Vyatta/ConfigLoad.pm
@@ -44,6 +44,7 @@ my %config_rank = (
'interfaces bridge' => 990,
'interfaces ethernet' => 980,
'interfaces tunnel' => 910,
+ 'zone-policy zone' => 900,
'system gateway-address' => 890,
'system name-server' => 880,
'system login user' => 870,
@@ -70,6 +71,9 @@ my %regex_rank = (
'protocols bgp \d+ neighbor \d+\.\d+\.\d+\.\d+' => 800,
'protocols bgp \d+ neighbor \w+' => 801,
'interfaces bridge \S* address' => 920,
+ 'zone-policy zone \S* interface' => 899,
+ 'zone-policy zone \S* local-zone' => 899,
+ 'zone-policy zone \S* from' => 898,
);
my @all_nodes = ();
diff --git a/templates/priority b/templates/priority
index 7f0aaf7..7d4aabf 100644
--- a/templates/priority
+++ b/templates/priority
@@ -222,3 +222,5 @@
916 service/telnet
917 service/webproxy
960 cluster
+970 zone-policy/zone/node.tag/from
+975 zone-policy
--
cgit v1.2.3