vyos-1x.git/data/templates/firewall, branch c-po-patch-1 VyOS command definitions, scripts, and utilities (mirror of https://github.com/vyos/vyos-1x.git) https://git.amelek.net/vyos/vyos-1x.git/atom?h=c-po-patch-1 2025-02-20T18:33:16+00:00 firewall: T7148: Bridge state-policy uses drop in place of reject 2025-02-20T18:33:16+00:00 sarthurdev 965089+sarthurdev@users.noreply.github.com 2025-02-20T18:33:16+00:00 urn:sha1:ac890f5e3ff7d0bb4853199204e4db7c4f1dcc3e T6841: firewall: Fixed issues in ZBF when using VRFs 2025-01-06T11:05:22+00:00 aapostoliuk a.apostoliuk@vyos.io 2024-12-17T11:39:49+00:00 urn:sha1:4a194b32509ffcd9574bb7571a5a6347f7dc4e42 Improve config parsing for ZBF when using VRFs and interfaces attached to VRFs T6841: firewall: improve config parsing for ZBF when using VRFs and interfaces attached to VRFs 2025-01-06T11:05:22+00:00 Nicolas Fort nicolasfort1988@gmail.com 2024-10-29T19:05:52+00:00 urn:sha1:df176d9b9b4cc67ae509ae2ff17a02f2520cc881 T6918: Accept invalid PPPoE Session in stateful bridge firewall. 2024-12-13T07:50:06+00:00 opswill root@opswill.com 2024-12-13T03:25:01+00:00 urn:sha1:c94dabede31447f3d1eaded08b448f944087539d Merge pull request #4024 from nicolas-fort/T6687 2024-09-30T14:48:56+00:00 Daniil Baturin daniil@vyos.io 2024-09-30T14:48:56+00:00 urn:sha1:eb55965347e53ac1dc336fe836b370a1f3e10a85 T6687: add fqdn support to nat rules. T6687: add fqdn support to nat rules. 2024-09-16T11:35:26+00:00 Nicolas Fort nicolasfort1988@gmail.com 2024-08-30T17:54:17+00:00 urn:sha1:4c3d037f036e84c77333a400b35bb1a628a1a118 T6679: add destination groups 2024-09-02T11:41:15+00:00 Nicolas Vollmar nvo@scaling.ch 2024-08-27T10:55:35+00:00 urn:sha1:f96733dd1e8d840012d98740006d7999a9fa6776 T6647: firewall. Introduce patch for accepting ARP and DHCP replies on stateful bridge firewall. This patch is needed because ARP and DHCP are marked as invalid connections. Also, add ehternet-type matcher in bridge firewall. 2024-08-28T12:19:19+00:00 Nicolas Fort nicolasfort1988@gmail.com 2024-08-26T18:10:01+00:00 urn:sha1:8e0e1a99e5510c7575ab8a09145d6b4354692d55 T6636: firewall: fix firewall template in order to write logs for default-action in order to match same structure as in rules. This way op-mode command for showing firewall log prints logs for default-actions too 2024-08-14T14:53:14+00:00 Nicolas Fort nicolasfort1988@gmail.com 2024-08-14T14:53:14+00:00 urn:sha1:747363e3ecd303e515cccdac381f321683613e20 T4072: change same helpers in xml definitions; add notrack action for prerouting chain; re introduce <set vrf> in policy; change global options for passing traffic to IPvX firewall; update smoketest 2024-08-02T12:50:26+00:00 Nicolas Fort nicolasfort1988@gmail.com 2024-07-31T12:42:25+00:00 urn:sha1:c33cd6157ebc5c08dc1e3ff1aa36f2d2fbb9ca83