vyos-1x.git/interface-definitions/include/firewall, branch fix/T8955-http-api-verify-tls VyOS command definitions, scripts, and utilities (mirror of https://github.com/vyos/vyos-1x.git) https://git.amelek.net/vyos/vyos-1x.git/atom?h=fix%2FT8955-http-api-verify-tls 2026-03-24T17:02:56+00:00 T8410: Fix typos and mistakes for operational and configuration commands 2026-03-24T17:02:56+00:00 Viacheslav Hletenko v.gletenko@vyos.io 2026-03-20T16:41:24+00:00 urn:sha1:bb2aee1e58c1cd30087b935798060e6bf3c698c8 Fix typos and mistakes in the commands and comments No functional changes xml: T8271: add additional information for ICMPv6 compeltion help 2026-02-15T11:58:14+00:00 Christian Breunig christian@breunig.cc 2026-02-15T11:56:45+00:00 urn:sha1:93a5c32c0d473a8318e9733ce8ded544961a6a27 xml: T8271: consolidate source-destination-group.xml.i and it's IPv4 equivalent 2026-02-15T11:58:14+00:00 Christian Breunig christian@breunig.cc 2026-02-15T11:08:20+00:00 urn:sha1:6b8139a9ed7426356f9515603e855fb89e5506af $ make interface_definitions $ git add -f templates-cfg $ ... refactor $ make interface_definitions $ git diff templates-cfg No change in any node.def file detected. xml: T8271: create re-usable XML block for port-group and domain-group 2026-02-15T11:58:05+00:00 Christian Breunig christian@breunig.cc 2026-02-15T10:58:34+00:00 urn:sha1:8a5094e0bd4c1be7000bc520d81ac03f6daff3f3 $ make interface_definitions $ git add -f templates-cfg $ ... refactor $ make interface_definitions $ git diff templates-cfg No change in any node.def file detected. geoip: T8049: Add MaxMind database support 2026-01-21T10:52:29+00:00 sarthurdev 965089+sarthurdev@users.noreply.github.com 2025-11-06T10:14:08+00:00 urn:sha1:8a329ef98eb120cc91aac6f7da6cd61dbc1ab950 firewall: T8089: "geoip country-code" should get a completion helper 2025-12-10T20:49:06+00:00 Christian Breunig christian@breunig.cc 2025-12-10T20:38:43+00:00 urn:sha1:caacb91ace1b2a1e82d74872205a69f10da6e73a There is a CLI constraint for lowercase country codes, but user's do not see this. Firewall: T7475: Disable conntrack per firewall chain 2025-09-05T20:37:19+00:00 l0crian1 ryan.claridge13@gmail.com 2025-09-05T20:37:19+00:00 urn:sha1:6611627f6a73af912082dc79c3039e6c492a6cc6 - Added command to disable conntrack per firewall chain - Added test_disable_conntrack_per_chain function to smoketest firewall: T6951: Add a configuration command for ethertypes that bridge firewalls should always accept 2025-06-17T15:16:51+00:00 Nataliia Solomko natalirs1985@gmail.com 2025-06-13T09:20:40+00:00 urn:sha1:8dbc3c5e67cc1fd043a78dd3446a1a733ebd814f T7523: firewall: Accepting invalid traffic for pppoe discovery and wol 2025-06-05T04:25:21+00:00 opswill will@nixops.org 2025-06-05T04:04:10+00:00 urn:sha1:bfdba4079b0a76a8c578277adae3f36add832b41 T7512: firewall: Modify accepting invalid traffic for VLAN aware bridge 2025-06-02T04:52:08+00:00 Indrajit Raychaudhuri irc@indrajit.com 2025-06-02T04:32:13+00:00 urn:sha1:b47adae7a3e963bfca3b775f4b84d5121907c76d Allow accepting invalid packets for ethernet types `8021q` and `8021ad` in addition to ARP and UDP types so that stateful bridge firewall works for VLAN-aware bridges in addition to regular bridges.