vyos-1x.git/data/templates/firewall/nftables.tmpl, branch feature/T9082-codeql-cpp VyOS command definitions, scripts, and utilities (mirror of https://github.com/vyos/vyos-1x.git) https://git.amelek.net/vyos/vyos-1x.git/atom?h=feature%2FT9082-codeql-cpp 2022-05-01T18:08:28+00:00 firewall: T4353: fix Jinja2 linting errors 2022-05-01T18:08:28+00:00 Christian Poessinger christian@poessinger.com 2022-05-01T18:08:28+00:00 urn:sha1:9eab0cdd0bbea0f899af5a7d68cc63523a12a703 firewall: T4333: migrate to new vyos_defined Jinja2 test 2022-04-10T16:56:36+00:00 Christian Poessinger christian@poessinger.com 2022-04-10T16:56:36+00:00 urn:sha1:de407ab8971d544b4a662bdeabd76c50c29b02d9 firewall: T4209: Fix support for rule `recent` matches 2022-02-04T00:09:42+00:00 sarthurdev 965089+sarthurdev@users.noreply.github.com 2022-01-27T15:58:36+00:00 urn:sha1:22f0794a9f195e69e277d48f031fe934febe9408 firewall: T4218: Adds a prefix to all user defined chains 2022-01-29T21:56:28+00:00 sarthurdev 965089+sarthurdev@users.noreply.github.com 2022-01-29T12:18:28+00:00 urn:sha1:ed67750b94e8bc779ec0e2cf6d568a3f7292de13 firewall: T2199: Add log prefix to match legacy perl behaviour 2022-01-20T10:14:43+00:00 sarthurdev 965089+sarthurdev@users.noreply.github.com 2022-01-19T23:27:53+00:00 urn:sha1:d1d0150b6a40252700181530ca87c5699a4bd0b4 Example syslog: [FWNAME-default-D] ... * Also clean-up firewall default-action firewall: T4188: Create default conntrack `FW_CONNTRACK` chain 2022-01-18T18:00:02+00:00 sarthurdev 965089+sarthurdev@users.noreply.github.com 2022-01-18T17:45:25+00:00 urn:sha1:a7e14cba820fcb4a0f448c05d4480e00d26130ee This chain was missing from the XML/Python rewrite thus all traffic fell through to the `notrack` rule. firewall: policy: T4159: T4164: Fix empty firewall groups, create separate file for group definitions. 2022-01-11T10:57:56+00:00 sarthurdev 965089+sarthurdev@users.noreply.github.com 2022-01-10T22:14:28+00:00 urn:sha1:f16525175deb69ae3b9193573550992b4d5fd951 firewall: zone-policy: T2199: T4130: Fixes for firewall, state-policy and zone-policy 2022-01-04T23:14:31+00:00 sarthurdev 965089+sarthurdev@users.noreply.github.com 2022-01-04T19:11:31+00:00 urn:sha1:459c7079bebe7059d90441a5014d948a92d2ee19 firewall: T4130: Fix firewall state-policy errors 2022-01-03T23:26:48+00:00 sarthurdev 965089+sarthurdev@users.noreply.github.com 2022-01-03T21:17:08+00:00 urn:sha1:84a83ecc4c78bf2e0954658ea539e42b4c015fa2 Also fixes: * Issue with multiple state-policy rules being created on firewall updates * Prevents interface rules being inserted before state-policy firewall: T2199: Migrate firewall to XML/Python 2021-12-06T20:20:49+00:00 sarthurdev 965089+sarthurdev@users.noreply.github.com 2021-07-28T10:03:21+00:00 urn:sha1:fdeba8da3e99256fe449e331d0b833a941315226