diff options
| author | Daniil Baturin <daniil@vyos.io> | 2024-06-06 17:19:01 +0200 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2024-06-06 17:19:01 +0200 |
| commit | 85da43aa26470e0657ba68437a297ed11045d132 (patch) | |
| tree | e094a3c15cb0556bd8579745ae75fd093c1d7aa8 /interface-definitions/include/firewall/ipv4-hook-output.xml.i | |
| parent | 1c57ed83b7838f4153f5b655c6a2b47bc12547ba (diff) | |
| parent | 770edf016838523c248e3c8a36c5f327a0b98415 (diff) | |
| download | vyos-1x-85da43aa26470e0657ba68437a297ed11045d132.tar.gz vyos-1x-85da43aa26470e0657ba68437a297ed11045d132.zip | |
Merge pull request #3578 from nicolas-fort/raw-hook
T3900: Add support for raw tables in firewall
Diffstat (limited to 'interface-definitions/include/firewall/ipv4-hook-output.xml.i')
| -rw-r--r-- | interface-definitions/include/firewall/ipv4-hook-output.xml.i | 27 |
1 files changed, 27 insertions, 0 deletions
diff --git a/interface-definitions/include/firewall/ipv4-hook-output.xml.i b/interface-definitions/include/firewall/ipv4-hook-output.xml.i index 2b537ce5e..ca47ae09b 100644 --- a/interface-definitions/include/firewall/ipv4-hook-output.xml.i +++ b/interface-definitions/include/firewall/ipv4-hook-output.xml.i @@ -31,6 +31,33 @@ </tagNode> </children> </node> + <node name="raw"> + <properties> + <help>IPv4 firewall output raw</help> + </properties> + <children> + #include <include/firewall/default-action-base-chains.xml.i> + #include <include/firewall/default-log.xml.i> + #include <include/generic-description.xml.i> + <tagNode name="rule"> + <properties> + <help>IPv4 Firewall output raw rule number</help> + <valueHelp> + <format>u32:1-999999</format> + <description>Number for this firewall rule</description> + </valueHelp> + <constraint> + <validator name="numeric" argument="--range 1-999999"/> + </constraint> + <constraintErrorMessage>Firewall rule number must be between 1 and 999999</constraintErrorMessage> + </properties> + <children> + #include <include/firewall/common-rule-ipv4-raw.xml.i> + #include <include/firewall/outbound-interface.xml.i> + </children> + </tagNode> + </children> + </node> </children> </node> <!-- include end --> |