vyos-1x.git/src/migration-scripts/firewall, branch vyos/1.4dev1VyOS command definitions, scripts, and utilities (mirror of https://github.com/vyos/vyos-1x.git)
https://git.amelek.net/vyos/vyos-1x.git/atom?h=vyos%2F1.4dev12023-08-11T20:14:10+00:00Merge pull request #2016 from nicolas-fort/T51602023-08-11T20:14:10+00:00Christian Breunigchristian@breunig.cc2023-08-11T20:14:10+00:00urn:sha1:482f7e352272b6ec16ba5d1ac7d9d7ea51d10f1d
T5160: Firewall refactorinterface: T5465: adjust-mss: config migration fails if applied to a VLAN or Q-in-Q interface2023-08-11T19:24:32+00:00Christian Breunigchristian@breunig.cc2023-08-11T19:24:05+00:00urn:sha1:f8b60fff531e4e8cfe1bba99652343b0680f98ad
When migration from 1.3 to 1.4 and a user hat the following configured:
options {
interface eth0.10{
adjust-mss 1452
adjust-mss6 1432
}
}
The configuration was wrongly migrated to:
interfaces {
ethernet eth0.10 {
ipv6 {
adjust-mss "1432"
}
ip {
adjust-mss "1452"
}
}
Instead of
interfaces {
ethernet eth0 {
vif 10 {
ipv6 {
adjust-mss "1432"
}
ip {
adjust-mss "1452"
}
}
}
T5460: remove config-trap from firewall2023-08-11T18:26:53+00:00Nicolas Fortnicolasfort1988@gmail.com2023-08-11T18:26:53+00:00urn:sha1:4e07fa25f551325fd90b92426e4693107090d346T5160: firewall refactor: move <set firewall ipv6 ipv6-name ...> to <set firewall ipv6 name ...> . Also fix some unexpected behaviour with geoip.2023-08-11T14:50:00+00:00Nicolas Fortnicolasfort1988@gmail.com2023-07-03T19:32:37+00:00urn:sha1:0300bf433d9aaff81fdecf9eeaabba8d06c1999fT5160: firewall refactor: fix firewall template for correct rule parsing that contains fqnd and/or geo-ip in base chains. Fix mig script2023-08-11T14:50:00+00:00Nicolas Fortnicolasfort1988@gmail.com2023-06-02T14:35:26+00:00urn:sha1:dbb069151f372ea521fad2edcd83f2d33631e6c7T5160: firewall refactor: change firewall ip to firewall ipv42023-08-11T14:49:54+00:00Nicolas Fortnicolasfort1988@gmail.com2023-05-31T15:07:42+00:00urn:sha1:68d14fe80145542ffd08a5f7d5cde6c090a0de07T5160: firewall refactor: new cli structure. Add migration script and update smoketest2023-08-11T14:40:57+00:00Nicolas Fortnicolasfort1988@gmail.com2023-05-23T17:56:29+00:00urn:sha1:ac5b9a4630f87a34d367deef690e8a54cc1eabecT5427: Fix migration script arguments len expects 2 args2023-08-02T09:12:23+00:00Viacheslav Hletenkov.gletenko@vyos.io2023-08-02T09:12:23+00:00urn:sha1:d1923b7b58795f0d9635ae0e8df110f591881bdf
The script's name is always provided as the first argument sys.argv[0]
Expected length for argv is 2 (script itself + config file)
Change: 'if (len(argv) < 1)' to 'if len(argv) < 2'
T5050: Firewall: Add log options2023-03-21T11:58:48+00:00Nicolas Fortnicolasfort1988@gmail.com2023-03-14T14:59:58+00:00urn:sha1:9a9f6e346beb209c819d859e2c7081f145060ac1T4780: Firewall: add firewall groups in firewall. Extend matching criteria so this new group can be used in inbound and outbound matcher2022-11-19T14:31:32+00:00Nicolas Fortnicolasfort1988@gmail.com2022-10-28T18:19:47+00:00urn:sha1:9a5dfb4b7ec9e065a73511a38e1713aec03eee0e