summaryrefslogtreecommitdiff
path: root/interface-definitions/include/nat-translation-port.xml.i
diff options
context:
space:
mode:
authorViacheslav Hletenko <v.gletenko@vyos.io>2022-01-25 19:09:08 +0000
committerViacheslav Hletenko <v.gletenko@vyos.io>2022-01-25 19:09:08 +0000
commit1d65ce9558b7c814295474a7cdf648866b612ff6 (patch)
tree095f7b4b9f0e3a37df8cee3a35a69a9dd0aaa4c8 /interface-definitions/include/nat-translation-port.xml.i
parent3249d761843c45fd25de1de31de33df018455bab (diff)
downloadvyos-1x-1d65ce9558b7c814295474a7cdf648866b612ff6.tar.gz
vyos-1x-1d65ce9558b7c814295474a7cdf648866b612ff6.zip
nat: T4138: Add port-range validation for NAT
Add port-validators for NAT rules that prevent to set incorrect port-ranges (21-5) and incorrect ports (70000)
Diffstat (limited to 'interface-definitions/include/nat-translation-port.xml.i')
-rw-r--r--interface-definitions/include/nat-translation-port.xml.i3
1 files changed, 3 insertions, 0 deletions
diff --git a/interface-definitions/include/nat-translation-port.xml.i b/interface-definitions/include/nat-translation-port.xml.i
index 6e507353c..6f17df3d9 100644
--- a/interface-definitions/include/nat-translation-port.xml.i
+++ b/interface-definitions/include/nat-translation-port.xml.i
@@ -10,6 +10,9 @@
<format>range</format>
<description>Numbered port range (e.g., 1001-1005)</description>
</valueHelp>
+ <constraint>
+ <validator name="port-range"/>
+ </constraint>
</properties>
</leafNode>
<!-- include end -->