diff options
| author | Nicolas Fort <nicolasfort1988@gmail.com> | 2022-04-11 17:52:30 +0000 |
|---|---|---|
| committer | Nicolas Fort <nicolasfort1988@gmail.com> | 2022-04-11 17:52:30 +0000 |
| commit | 19d38aa98cd656a2d4c558f6c99635b3d662b9cb (patch) | |
| tree | 6403a576626ba2f8c7c8cba0457fe86d19d301e0 /interface-definitions/include/firewall | |
| parent | 3a5cf74b06cef960e9a701172618c2c366591255 (diff) | |
| download | vyos-1x-19d38aa98cd656a2d4c558f6c99635b3d662b9cb.tar.gz vyos-1x-19d38aa98cd656a2d4c558f6c99635b3d662b9cb.zip | |
Firewall: T990: Add snat and dst connection status on firewall
Diffstat (limited to 'interface-definitions/include/firewall')
| -rw-r--r-- | interface-definitions/include/firewall/common-rule.xml.i | 60 |
1 files changed, 17 insertions, 43 deletions
diff --git a/interface-definitions/include/firewall/common-rule.xml.i b/interface-definitions/include/firewall/common-rule.xml.i index 6e61de848..e74ce4ee4 100644 --- a/interface-definitions/include/firewall/common-rule.xml.i +++ b/interface-definitions/include/firewall/common-rule.xml.i @@ -95,51 +95,25 @@ </constraint> </properties> </leafNode> -<node name="ct-status"> +<leafNode name="connection-status"> <properties> - <help>Connection status in conntrack</help> + <help>Connection status</help> + <completionHelp> + <list>dnat snat</list> + </completionHelp> + <valueHelp> + <format>dnat</format> + <description>Match connections that are subject to destination NAT</description> + </valueHelp> + <valueHelp> + <format>snat</format> + <description>Match connections that are subject to source NAT</description> + </valueHelp> + <constraint> + <regex>^(dnat|snat)$</regex> + </constraint> </properties> - <children> - <leafNode name="dnat"> - <properties> - <help>Set when connection needs DNAT in original direction</help> - <completionHelp> - <list>enable disable</list> - </completionHelp> - <valueHelp> - <format>enable</format> - <description>Enable</description> - </valueHelp> - <valueHelp> - <format>disable</format> - <description>Disable</description> - </valueHelp> - <constraint> - <regex>^(enable|disable)$</regex> - </constraint> - </properties> - </leafNode> - <leafNode name="snat"> - <properties> - <help>Set when connection needs SNAT in original direction</help> - <completionHelp> - <list>enable disable</list> - </completionHelp> - <valueHelp> - <format>enable</format> - <description>Enable</description> - </valueHelp> - <valueHelp> - <format>disable</format> - <description>Disable</description> - </valueHelp> - <constraint> - <regex>^(enable|disable)$</regex> - </constraint> - </properties> - </leafNode> - </children> -</node> +</leafNode> <leafNode name="protocol"> <properties> <help>Protocol to match (protocol name, number, or "all")</help> |