vyos-1x.git/interface-definitions/include/firewall/common-rule-bridge.xml.i, branch rolling VyOS command definitions, scripts, and utilities (mirror of https://github.com/vyos/vyos-1x.git) https://git.amelek.net/vyos/vyos-1x.git/atom?h=rolling 2024-09-10T06:56:18+00:00 T6698: firewall: add matcher for vlan type. (#4027) 2024-09-10T06:56:18+00:00 Nicolás Fort 95703796+nicolas-fort@users.noreply.github.com 2024-09-10T06:56:18+00:00 urn:sha1:ec3ebe8890c60bbb6f657335c212ac7078dc731c T6647: firewall. Introduce patch for accepting ARP and DHCP replies on stateful bridge firewall. This patch is needed because ARP and DHCP are marked as invalid connections. Also, add ehternet-type matcher in bridge firewall. 2024-08-28T12:19:19+00:00 Nicolas Fort nicolasfort1988@gmail.com 2024-08-26T18:10:01+00:00 urn:sha1:8e0e1a99e5510c7575ab8a09145d6b4354692d55 T4072: change same helpers in xml definitions; add notrack action for prerouting chain; re introduce <set vrf> in policy; change global options for passing traffic to IPvX firewall; update smoketest 2024-08-02T12:50:26+00:00 Nicolas Fort nicolasfort1988@gmail.com 2024-07-31T12:42:25+00:00 urn:sha1:c33cd6157ebc5c08dc1e3ff1aa36f2d2fbb9ca83 T4072: firewall: extend firewall bridge capabilities, in order to include new chains, priorities, and firewall groups 2024-08-01T16:25:31+00:00 Nicolas Fort nicolasfort1988@gmail.com 2024-07-24T14:08:19+00:00 urn:sha1:20551379e8e2b4b6e342b39ea67738876e559bbf xml: T5738: use generic-disable-node building block for "disable" CLI nodes 2024-03-05T19:20:27+00:00 Christian Breunig christian@breunig.cc 2024-03-05T19:20:27+00:00 urn:sha1:21b0bf0168697fdbe514ae49a4a28b39a91ec777 Make the code more uniform and maintainable. firewall: T5834: Improve log message and simplify log-option include 2023-12-27T03:49:51+00:00 Indrajit Raychaudhuri irc@indrajit.com 2023-12-22T23:22:20+00:00 urn:sha1:53a48f499ae9bcc2f657136bb7779b38aad1c242 `include/firewall/rule-log-options.xml.i` is now more aptly renamed to `include/firewall/log-options.xml.i`. T5729: firewall: switch to valueless in order to remove unnecessary <enable|disable> commands; log and state moved to new syntax. 2023-11-10T19:26:35+00:00 Nicolas Fort nicolasfort1988@gmail.com 2023-11-10T19:26:35+00:00 urn:sha1:c4409d6a4e11bf2acc7b5b96888e2c471c4559e5 T4072: add firewall bridge filtering. First implementation only applies for forward chain and few matchers. Should be extended in the future. 2023-09-07T20:30:50+00:00 Nicolas Fort nicolasfort1988@gmail.com 2023-09-07T20:30:50+00:00 urn:sha1:1772c0a7232789e6eeb0caa78fe630fab899522d