vyos-1x.git/interface-definitions/include/firewall, branch sagitta VyOS command definitions, scripts, and utilities (mirror of https://github.com/vyos/vyos-1x.git) https://git.amelek.net/vyos/vyos-1x.git/atom?h=sagitta 2024-05-07T17:51:32+00:00 T6305: accept ipoe interfaces on firewall ruleset 2024-05-07T17:51:32+00:00 Nicolas Fort nicolasfort1988@gmail.com 2024-05-07T15:23:18+00:00 urn:sha1:36e11443f26ab6d6244ff1d21ee96e620b1c07f0 (cherry picked from commit b5f22f70006eed6c7e62700128d5034b1b95db31) T5535: firewall: migrate command <set system ip disable-directed-broadcast> to firewall global-optinos 2024-04-15T14:41:29+00:00 Nicolas Fort nicolasfort1988@gmail.com 2024-04-15T14:15:14+00:00 urn:sha1:67bc10841f088e4ccabc30b1442b43f8d5902f5e (cherry picked from commit 76dcecafca977b640dd16d8e68c4a050ca1af4fb) xml: T5738: use generic-disable-node building block for "disable" CLI nodes 2024-03-05T19:23:48+00:00 Christian Breunig christian@breunig.cc 2024-03-05T19:20:27+00:00 urn:sha1:390e543780b56f98dca3172345ce783819222da8 Make the code more uniform and maintainable. (cherry picked from commit 21b0bf0168697fdbe514ae49a4a28b39a91ec777) T4839: firewall: Add dynamic address group in firewall configuration, and appropiate commands to populate such groups using source and destination address of the packet. 2024-02-01T20:22:26+00:00 Nicolas Fort nicolasfort1988@gmail.com 2024-01-05T12:13:17+00:00 urn:sha1:3ce9583b9420ed72cf45728f439f00b1c4cf5800 (cherry picked from commit 6ce5fedb602c5ea0df52049a5e9c4fb4f5a86122) T5977: firewall: remove ipsec options in output chain rule definitions, since it's not supported. 2024-02-01T07:15:29+00:00 Nicolas Fort nicolasfort1988@gmail.com 2024-01-23T18:43:34+00:00 urn:sha1:f00a8dd320ed52677d3c45044cf03eaf63818567 (cherry picked from commit 9d490ecf616eb9d019beee37a3802705c4109d9d) firewall: T5729: T5681: T5217: backport subsystem from current branch 2024-01-22T06:47:17+00:00 Christian Breunig christian@breunig.cc 2024-01-19T20:01:52+00:00 urn:sha1:2ec023752bdd400835eb69a8f1f9d2873cef61fa This is a combined backport for all accumulated changes done to the firewall subsystem on the current branch. conntrack: T5376: T5779: backport from current 2024-01-18T21:09:30+00:00 Christian Breunig christian@breunig.cc 2024-01-18T21:05:16+00:00 urn:sha1:80068c8ce453a385981999c25e4ff5aeaa6bf030 Backport of the conntrack system from current branch. (cherry picked from commit fd0bcaf12) (cherry picked from commit 5acf5aced) (cherry picked from commit 42ff4d8a7) (cherry picked from commit 24a1a7059) Merge pull request #2793 from sarthurdev/T5550_sagitta 2024-01-11T05:41:17+00:00 Christian Breunig christian@breunig.cc 2024-01-11T05:41:17+00:00 urn:sha1:68bacdc20c10566671ce809e9668ca27666bca22 interface: T5550: Interface source-validation priority over global value (backport) T5896: firewall: backport interface validator for firewall rules. 2024-01-08T11:05:56+00:00 Nicolas Fort nicolasfort1988@gmail.com 2024-01-08T11:05:56+00:00 urn:sha1:02db800b3aaa4b5c7de5564271c0ea37e895915a firewall: T5834: Improve log message and simplify log-option include 2023-12-30T19:34:43+00:00 Indrajit Raychaudhuri irc@indrajit.com 2023-12-22T23:22:20+00:00 urn:sha1:57faafc8f8597f62d5edb5529349a565d7d2e865 `include/firewall/rule-log-options.xml.i` is now more aptly renamed to `include/firewall/log-options.xml.i`. (cherry picked from commit 53a48f499ae9bcc2f657136bb7779b38aad1c242)