vyos-1x.git/interface-definitions/include/firewall/action.xml.i, branch T6732-build-image-circinusVyOS command definitions, scripts, and utilities (mirror of https://github.com/vyos/vyos-1x.git)
https://git.amelek.net/vyos/vyos-1x.git/atom?h=T6732-build-image-circinus2023-12-15T06:09:53+00:00firewall: T4502: add ofload to firewall table actions2023-12-15T06:09:53+00:00GurliGebisGurliGebis@users.noreply.github.com2023-12-15T06:09:53+00:00urn:sha1:e2d9b215659a9131e9a03f9ebd74c8af6a9e37fdT5217: Add firewall synproxy2023-09-21T12:30:39+00:00Viacheslav Hletenkov.gletenko@vyos.io2023-09-20T11:46:42+00:00urn:sha1:bdad4e046872e054ec7783b2f04b73a8a690a045
Add ability to SYNPROXY connections
It is useful to protect against TCP SYN flood attacks and port-scanners
set firewall global-options syn-cookies 'enable'
set firewall ipv4 input filter rule 10 action 'synproxy'
set firewall ipv4 input filter rule 10 destination port '22'
set firewall ipv4 input filter rule 10 inbound-interface interface-name 'eth1'
set firewall ipv4 input filter rule 10 protocol 'tcp'
set firewall ipv4 input filter rule 10 synproxy tcp mss '1460'
set firewall ipv4 input filter rule 10 synproxy tcp window-scale '7'
T4072: add firewall bridge filtering. First implementation only applies for forward chain and few matchers. Should be extended in the future.2023-09-07T20:30:50+00:00Nicolas Fortnicolasfort1988@gmail.com2023-09-07T20:30:50+00:00urn:sha1:1772c0a7232789e6eeb0caa78fe630fab899522dT5037: Firewall: Add queue action and options to firewall2023-02-28T14:19:52+00:00Nicolas Fortnicolasfort1988@gmail.com2023-02-27T20:11:35+00:00urn:sha1:bbfe6b54b58b68768f6427496d8ac3c1ef38da93T4699: Firewall: Add return action, since jump action was added recently2022-09-21T17:46:32+00:00Nicolas Fortnicolasfort1988@gmail.com2022-09-21T17:46:32+00:00urn:sha1:2a4f007bc3f384fcd7ca43254f38a4156ab1f8c8T4699: Firewall: Add jump action in firewall rulest2022-09-16T16:35:11+00:00Nicolas Fortnicolasfort1988@gmail.com2022-09-16T16:35:11+00:00urn:sha1:99155150df9ceed0be4df46351844451b0683b3bxml: drop not always applicable REQUIRED suffix from completion help string2022-06-10T18:07:32+00:00Christian Poessingerchristian@poessinger.com2022-06-10T18:06:31+00:00urn:sha1:18b303734d84c0c5677ea4d872ec068ffcab4cad
If a parameter is required is determined from the Python string on commit.
This "indicator" is not used consistently and sometimes missing, or added where
it is not required anymore due to Python script improvement/rewrite.
xml: T4047: use full string match in the regex validator2022-04-29T17:51:50+00:00Christian Poessingerchristian@poessinger.com2022-04-29T17:51:50+00:00urn:sha1:80ecb1b7aaab47edeb355c3b74a763e940d88179firewall: T2199: Migrate firewall to XML/Python2021-12-06T20:20:49+00:00sarthurdev965089+sarthurdev@users.noreply.github.com2021-07-28T10:03:21+00:00urn:sha1:fdeba8da3e99256fe449e331d0b833a941315226firewall: T3568: add XML definitions for firewall2021-05-25T20:17:16+00:00Viacheslav Hletenkov.gletenko@vyos.io2021-05-25T20:17:16+00:00urn:sha1:654c8cad2daaf84a07e4664d2c0469a863a46bdc
Add XML for configuration mode firewall. Used for future rewriting it to Python style.