vyos-1x.git/data/vyos-firewall-init.conf, branch rolling VyOS command definitions, scripts, and utilities (mirror of https://github.com/vyos/vyos-1x.git) https://git.amelek.net/vyos/vyos-1x.git/atom?h=rolling 2025-07-17T03:42:16+00:00 T5797: Adjust MSS from forward hook to postrouting 2025-07-17T03:42:16+00:00 Giga Murphy giga1699@gmail.com 2025-07-17T03:36:04+00:00 urn:sha1:f3d6b9aa369ea08868a35cd44225b4013540b7ab vrf: conntrack: T6073: Populate VRF zoning chains only while conntrack is required 2024-02-27T21:35:11+00:00 sarthurdev 965089+sarthurdev@users.noreply.github.com 2024-02-27T20:38:24+00:00 urn:sha1:6f7d1e15665655e37e8ca830e28d9650445c1217 vrf: T5973: move initial conntrack firewall table to startup 2024-01-22T19:48:44+00:00 Christian Breunig christian@breunig.cc 2024-01-22T19:48:44+00:00 urn:sha1:89f0d347bfe5e468355817a617dc71823a58c284 There is no need to add and remove this table during runtime - it can lurk in the standard firewall init code. conntrack: T5571: Refactor conntrack to be independent conf script from firewall, nat, nat66 2023-09-16T11:20:10+00:00 sarthurdev 965089+sarthurdev@users.noreply.github.com 2023-09-14T01:01:56+00:00 urn:sha1:734d84f696944419a2d6f11bc16dda03900add34 Merge pull request #2199 from sarthurdev/T4309 2023-09-06T18:26:06+00:00 Christian Breunig christian@breunig.cc 2023-09-06T18:26:06+00:00 urn:sha1:50f3e9f66abfd7e0cad344c4c0fac0df7bc322df conntrack: T4309: T4903: Refactor `system conntrack ignore`, add IPv6 support and firewall groups interface: T5550: Interface source-validation priority over global value 2023-09-05T18:27:49+00:00 sarthurdev 965089+sarthurdev@users.noreply.github.com 2023-09-05T12:51:16+00:00 urn:sha1:0de3de1e0a78eb35b666b8f613d3e54fd3ad54e4 - Migrate IPv4 source-validation to nftables - Interface source-validation value takes priority, fallback to global value conntrack: T4309: T4903: Refactor `system conntrack ignore` rule generation, add IPv6 support and firewall groups 2023-09-04T10:36:11+00:00 sarthurdev 965089+sarthurdev@users.noreply.github.com 2023-09-03T11:08:00+00:00 urn:sha1:5a8e3089b35e2eca2f896a01410fcdf6ac928278 firewall: T5080: Disable conntrack unless required by rules 2023-08-26T21:20:22+00:00 sarthurdev 965089+sarthurdev@users.noreply.github.com 2023-08-26T21:02:10+00:00 urn:sha1:6b5d3568b88fad9cda694c0cd8b82c1f16773b15 interface: T3509: Add per-interface IPv6 source validation 2023-08-25T14:51:49+00:00 sarthurdev 965089+sarthurdev@users.noreply.github.com 2023-08-25T11:54:47+00:00 urn:sha1:b6f742716da5f89c7f3f3501220e0f3ae1df45d8 T5488: Set correct priority -300 for conntrack entries 2023-08-17T17:38:27+00:00 Viacheslav Hletenko v.gletenko@vyos.io 2023-08-17T17:38:27+00:00 urn:sha1:8c2aa73dce97a7c8c7e5efd2076e272a1af90bc8 For conntrack ignore priority must be less then -200