summaryrefslogtreecommitdiff
path: root/interface-definitions/include/firewall
diff options
context:
space:
mode:
authorNicolas Fort <nicolasfort1988@gmail.com>2022-04-11 17:52:30 +0000
committerNicolas Fort <nicolasfort1988@gmail.com>2022-04-11 17:52:30 +0000
commit19d38aa98cd656a2d4c558f6c99635b3d662b9cb (patch)
tree6403a576626ba2f8c7c8cba0457fe86d19d301e0 /interface-definitions/include/firewall
parent3a5cf74b06cef960e9a701172618c2c366591255 (diff)
downloadvyos-1x-19d38aa98cd656a2d4c558f6c99635b3d662b9cb.tar.gz
vyos-1x-19d38aa98cd656a2d4c558f6c99635b3d662b9cb.zip
Firewall: T990: Add snat and dst connection status on firewall
Diffstat (limited to 'interface-definitions/include/firewall')
-rw-r--r--interface-definitions/include/firewall/common-rule.xml.i60
1 files changed, 17 insertions, 43 deletions
diff --git a/interface-definitions/include/firewall/common-rule.xml.i b/interface-definitions/include/firewall/common-rule.xml.i
index 6e61de848..e74ce4ee4 100644
--- a/interface-definitions/include/firewall/common-rule.xml.i
+++ b/interface-definitions/include/firewall/common-rule.xml.i
@@ -95,51 +95,25 @@
</constraint>
</properties>
</leafNode>
-<node name="ct-status">
+<leafNode name="connection-status">
<properties>
- <help>Connection status in conntrack</help>
+ <help>Connection status</help>
+ <completionHelp>
+ <list>dnat snat</list>
+ </completionHelp>
+ <valueHelp>
+ <format>dnat</format>
+ <description>Match connections that are subject to destination NAT</description>
+ </valueHelp>
+ <valueHelp>
+ <format>snat</format>
+ <description>Match connections that are subject to source NAT</description>
+ </valueHelp>
+ <constraint>
+ <regex>^(dnat|snat)$</regex>
+ </constraint>
</properties>
- <children>
- <leafNode name="dnat">
- <properties>
- <help>Set when connection needs DNAT in original direction</help>
- <completionHelp>
- <list>enable disable</list>
- </completionHelp>
- <valueHelp>
- <format>enable</format>
- <description>Enable</description>
- </valueHelp>
- <valueHelp>
- <format>disable</format>
- <description>Disable</description>
- </valueHelp>
- <constraint>
- <regex>^(enable|disable)$</regex>
- </constraint>
- </properties>
- </leafNode>
- <leafNode name="snat">
- <properties>
- <help>Set when connection needs SNAT in original direction</help>
- <completionHelp>
- <list>enable disable</list>
- </completionHelp>
- <valueHelp>
- <format>enable</format>
- <description>Enable</description>
- </valueHelp>
- <valueHelp>
- <format>disable</format>
- <description>Disable</description>
- </valueHelp>
- <constraint>
- <regex>^(enable|disable)$</regex>
- </constraint>
- </properties>
- </leafNode>
- </children>
-</node>
+</leafNode>
<leafNode name="protocol">
<properties>
<help>Protocol to match (protocol name, number, or "all")</help>