vyos-1x.git/interface-definitions/firewall.xml.in, branch circinus-public-unmaintainedVyOS command definitions, scripts, and utilities (mirror of https://github.com/vyos/vyos-1x.git)
https://git.amelek.net/vyos/vyos-1x.git/atom?h=circinus-public-unmaintained2024-08-16T04:44:25+00:00T5794: change firewall priority in oder to be loaded after all interfaces.2024-08-16T04:44:25+00:00nicolasnicolas@deb-4all.nfort.local2024-08-15T17:37:59+00:00urn:sha1:781263e8bec1e5e1ecb6dd39ea64f1d45a7f0f52
(cherry picked from commit b3ae35987a860a5d2cf64dfbc156a7ee7cc799a2)
T3900: add support for raw table in firewall.2024-05-15T17:09:16+00:00Nicolas Fortnicolasfort1988@gmail.com2024-05-15T17:09:16+00:00urn:sha1:6871c5541c1962e63d7a9b75d2bb43df2a8d372bT6214: T6213: change constraint <alpha-numeric-hyphen-underscore-dot.xml.i> in order to not allow string starting with dot character; use such constraint in firewall group definitions.2024-04-09T16:50:36+00:00Nicolas Fortnicolasfort1988@gmail.com2024-04-09T11:02:58+00:00urn:sha1:c455a1f71674300b8a74863ddfe6e551fe8fd252Merge pull request #2999 from sever-sever/T59282024-02-13T16:35:25+00:00Christian Breunigchristian@breunig.cc2024-02-13T16:35:25+00:00urn:sha1:83bf14e34a986ba35904f3889341310f85ae88c4
T5928: Change firewall priority to 319T5064: Firewall fix RegEx for for domain-group2024-02-13T16:10:48+00:00Viacheslav Hletenkov.gletenko@vyos.io2024-02-13T16:10:48+00:00urn:sha1:b67049edab41e8714aec087b81d589fdb03a350b
Improve RegEx for firewall domain-groups.
This domain group looks good, but the current RegEx validation
fils:
```
set firewall group domain-group a_aa
```
T5928: Change firewall priority to 3192024-02-13T12:06:07+00:00Viacheslav Hletenkov.gletenko@vyos.io2024-02-13T12:06:07+00:00urn:sha1:f1dcd2d23f89251b0a96c61f8186002cb0d50d18
Change the firewall priority to 319, after interface ethernet
configuration
For example if we use VLANs and the vlan interface must be
created before we can use it in the firewall/flowtable
The current priority
```
199 firewall
300 interfaces/dummy
300 interfaces/loopback
300 interfaces/virtual-ethernet
310 interfaces/bridge
310 interfaces/input
318 interfaces/ethernet
...
```
T4839: firewall: Add dynamic address group in firewall configuration, and appropiate commands to populate such groups using source and destination address of the packet.2024-01-25T12:35:46+00:00Nicolas Fortnicolasfort1988@gmail.com2024-01-05T12:13:17+00:00urn:sha1:6ce5fedb602c5ea0df52049a5e9c4fb4f5a86122firewall: T5834: Rename 'enable-default-log' to 'default-log'2023-12-26T22:28:25+00:00Indrajit Raychaudhuriirc@indrajit.com2023-12-18T08:45:12+00:00urn:sha1:245e758aa2ea8779186d0c92d79d33170d036992
Rename chain level defaults log option from `enable-default-log` to
`default-log` for consistency.
T5775: firewall: re-add state-policy to firewall. These commands are now included in <set firewall global-options state-policy> node.2023-11-24T10:24:48+00:00Nicolas Fortnicolasfort1988@gmail.com2023-11-24T10:24:48+00:00urn:sha1:64ee13cf9374d6e726570a8d0083c2e7a386a873T5541: firewall zone: re add firewall zone-base firewall2023-10-13T14:12:58+00:00Nicolas Fortnicolasfort1988@gmail.com2023-10-13T14:12:58+00:00urn:sha1:c74ecbaaccde377653d2a9daa07556f3b8f7cd3e