vyos-1x.git/data/templates/firewall, branch yevhen-secrets VyOS command definitions, scripts, and utilities (mirror of https://github.com/vyos/vyos-1x.git) https://git.amelek.net/vyos/vyos-1x.git/atom?h=yevhen-secrets 2024-09-02T11:41:15+00:00 T6679: add destination groups 2024-09-02T11:41:15+00:00 Nicolas Vollmar nvo@scaling.ch 2024-08-27T10:55:35+00:00 urn:sha1:f96733dd1e8d840012d98740006d7999a9fa6776 T6647: firewall. Introduce patch for accepting ARP and DHCP replies on stateful bridge firewall. This patch is needed because ARP and DHCP are marked as invalid connections. Also, add ehternet-type matcher in bridge firewall. 2024-08-28T12:19:19+00:00 Nicolas Fort nicolasfort1988@gmail.com 2024-08-26T18:10:01+00:00 urn:sha1:8e0e1a99e5510c7575ab8a09145d6b4354692d55 T6636: firewall: fix firewall template in order to write logs for default-action in order to match same structure as in rules. This way op-mode command for showing firewall log prints logs for default-actions too 2024-08-14T14:53:14+00:00 Nicolas Fort nicolasfort1988@gmail.com 2024-08-14T14:53:14+00:00 urn:sha1:747363e3ecd303e515cccdac381f321683613e20 T4072: change same helpers in xml definitions; add notrack action for prerouting chain; re introduce <set vrf> in policy; change global options for passing traffic to IPvX firewall; update smoketest 2024-08-02T12:50:26+00:00 Nicolas Fort nicolasfort1988@gmail.com 2024-07-31T12:42:25+00:00 urn:sha1:c33cd6157ebc5c08dc1e3ff1aa36f2d2fbb9ca83 T4072: firewall: extend firewall bridge smoketest 2024-08-01T16:25:39+00:00 Nicolas Fort nicolasfort1988@gmail.com 2024-07-29T17:55:56+00:00 urn:sha1:fa764927c14350104671edbb2bb3570ab267e416 T6570: firewall: add global-option to configure sysctl parameter for enabling/disabling sending traffic from bridge layer to ipvX layer 2024-08-01T16:25:39+00:00 Nicolas Fort nicolasfort1988@gmail.com 2024-07-24T17:40:28+00:00 urn:sha1:a8a9cfe750da719605ab90ce8c83c42276ab07f3 T4072: firewall: extend firewall bridge capabilities, in order to include new chains, priorities, and firewall groups 2024-08-01T16:25:31+00:00 Nicolas Fort nicolasfort1988@gmail.com 2024-07-24T14:08:19+00:00 urn:sha1:20551379e8e2b4b6e342b39ea67738876e559bbf T3900: extend latest fix for firewall raw implementation to ipv6. 2024-06-25T11:55:53+00:00 Nicolas Fort nicolasfort1988@gmail.com 2024-06-25T11:55:53+00:00 urn:sha1:ecf3141d5b5fe08c6ae00b5cd299daf6a6e30f82 T3900: firewall: fix for initial implementation - remove jump to state policy on OUTUT_raw 2024-06-20T15:11:14+00:00 Nicolas Fort nicolasfort1988@gmail.com 2024-06-20T14:57:50+00:00 urn:sha1:7829229e8a91c554db188cf523669bb11ec77c2a Merge pull request #3578 from nicolas-fort/raw-hook 2024-06-06T15:19:01+00:00 Daniil Baturin daniil@vyos.io 2024-06-06T15:19:01+00:00 urn:sha1:85da43aa26470e0657ba68437a297ed11045d132 T3900: Add support for raw tables in firewall