vyos-1x.git/src/conf_mode/firewall_options.py, branch feature/T9082-codeql-cpp

interfaces: T3090: migrate adjust-mss from "firewall options" to "interface" level

2021-08-21T13:26:35+00:00

Getting rid of "set firewall options" and move it from: set firewall options interface ethX adjust-mss 1400 set firewall options interface ethX adjust-mss6 1400 to: set interfaces ethernet ethX ip adjust-mss 1400 set interfaces ethernet ethX ipv6 adjust-mss 1400 In addition add an extra option called clamp-mss-to-pmtu instead of a value.

configd: T2582: add scripts to include list for daemon

2020-08-31T14:57:00+00:00

airbag: T2088: explicit enabling of the feature

2020-05-29T05:37:00+00:00

airbag must now be explicitly installed. the patch also allow to fully disables the installation of the logging code at setup (and not just installing and doing nothing)

util: T2226: os.system was wrongly converted to run

2020-04-09T18:08:24+00:00

os.system does print the ouput of the command, run() does not. A new function called call() does the printing and return the error code.

util: T2226: covert most calls from os.system to util

2020-04-06T19:22:35+00:00

As little change a possible but the function call The behaviour should be totally unchanged.

firewall: T1461: deleting 'firewall options' causes Python TypeError

2019-06-20T20:14:36+00:00

[ firewall options interface wg01 ] Traceback (most recent call last): File "/usr/libexec/vyos/conf_mode/firewall_options.py", line 139, in apply(c) File "/usr/libexec/vyos/conf_mode/firewall_options.py", line 97, in apply if tcp['new_chain4']: TypeError: 'NoneType' object is not subscriptable delete [ firewall options ] failed delete [ firewall ] failed Commit failed

[firewall] T314: add firewall options for MSS clamping

2019-04-21T11:21:12+00:00

* clamp MSS IPv4 set firewall options interface pppoe0 adjust-mss '1452' * clamp MSS IPv6 set firewall options interface pppoe0 adjust-mss6 '1452' * disable entire rule set firewall options interface pppoe0 disable Output ------ $ sudo iptables-save -t mangle # Generated by iptables-save v1.4.21 on Sun Apr 21 12:56:25 2019 *mangle :PREROUTING ACCEPT [1217:439885] :INPUT ACCEPT [290:52459] :FORWARD ACCEPT [920:375774] :OUTPUT ACCEPT [301:100053] :POSTROUTING ACCEPT [1221:475827] :VYOS_FW_OPTIONS - [0:0] -A FORWARD -j VYOS_FW_OPTIONS -A VYOS_FW_OPTIONS -o pppoe0 -p tcp -m tcp --tcp-flags SYN,RST SYN -j TCPMSS --set-mss 1452 COMMIT Completed on Sun Apr 21 12:56:25 2019 (cherry picked from commit 476aa4c3a561ea0ef0bf9b4c26ec8b78d18a5d02)