diff options
| author | Christian Poessinger <christian@poessinger.com> | 2022-05-09 07:22:41 +0200 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2022-05-09 07:22:41 +0200 |
| commit | 432fd1b5e7b5a1e5b8503bf0dcd106369e323dc7 (patch) | |
| tree | e8d30a3eb65895b955c81e284560c24309a5c65e /interface-definitions/include/firewall | |
| parent | 2e28d3f68c10dadc87bbff9ff2cc6410798384ae (diff) | |
| parent | 15e55af88e6104608487c1138641fcff54594d89 (diff) | |
| download | vyos-1x-432fd1b5e7b5a1e5b8503bf0dcd106369e323dc7.tar.gz vyos-1x-432fd1b5e7b5a1e5b8503bf0dcd106369e323dc7.zip | |
Merge pull request #1279 from nicolas-fort/T990
Firewall: T990: Add snat and dnat connection status on firewall
Diffstat (limited to 'interface-definitions/include/firewall')
| -rw-r--r-- | interface-definitions/include/firewall/common-rule.xml.i | 26 |
1 files changed, 26 insertions, 0 deletions
diff --git a/interface-definitions/include/firewall/common-rule.xml.i b/interface-definitions/include/firewall/common-rule.xml.i index cbdfa9dc2..2a5137dbf 100644 --- a/interface-definitions/include/firewall/common-rule.xml.i +++ b/interface-definitions/include/firewall/common-rule.xml.i @@ -95,6 +95,32 @@ </constraint> </properties> </leafNode> +<node name="connection-status"> + <properties> + <help>Connection status</help> + </properties> + <children> + <leafNode name="nat"> + <properties> + <help>NAT connection status</help> + <completionHelp> + <list>destination source</list> + </completionHelp> + <valueHelp> + <format>destination</format> + <description>Match connections that are subject to destination NAT</description> + </valueHelp> + <valueHelp> + <format>source</format> + <description>Match connections that are subject to source NAT</description> + </valueHelp> + <constraint> + <regex>^(destination|source)$</regex> + </constraint> + </properties> + </leafNode> + </children> +</node> <leafNode name="protocol"> <properties> <help>Protocol to match (protocol name, number, or "all")</help> |