summaryrefslogtreecommitdiff
path: root/interface-definitions/include
diff options
context:
space:
mode:
authorChristian Poessinger <christian@poessinger.com>2022-05-09 07:22:41 +0200
committerGitHub <noreply@github.com>2022-05-09 07:22:41 +0200
commit432fd1b5e7b5a1e5b8503bf0dcd106369e323dc7 (patch)
treee8d30a3eb65895b955c81e284560c24309a5c65e /interface-definitions/include
parent2e28d3f68c10dadc87bbff9ff2cc6410798384ae (diff)
parent15e55af88e6104608487c1138641fcff54594d89 (diff)
downloadvyos-1x-432fd1b5e7b5a1e5b8503bf0dcd106369e323dc7.tar.gz
vyos-1x-432fd1b5e7b5a1e5b8503bf0dcd106369e323dc7.zip
Merge pull request #1279 from nicolas-fort/T990
Firewall: T990: Add snat and dnat connection status on firewall
Diffstat (limited to 'interface-definitions/include')
-rw-r--r--interface-definitions/include/firewall/common-rule.xml.i26
1 files changed, 26 insertions, 0 deletions
diff --git a/interface-definitions/include/firewall/common-rule.xml.i b/interface-definitions/include/firewall/common-rule.xml.i
index cbdfa9dc2..2a5137dbf 100644
--- a/interface-definitions/include/firewall/common-rule.xml.i
+++ b/interface-definitions/include/firewall/common-rule.xml.i
@@ -95,6 +95,32 @@
</constraint>
</properties>
</leafNode>
+<node name="connection-status">
+ <properties>
+ <help>Connection status</help>
+ </properties>
+ <children>
+ <leafNode name="nat">
+ <properties>
+ <help>NAT connection status</help>
+ <completionHelp>
+ <list>destination source</list>
+ </completionHelp>
+ <valueHelp>
+ <format>destination</format>
+ <description>Match connections that are subject to destination NAT</description>
+ </valueHelp>
+ <valueHelp>
+ <format>source</format>
+ <description>Match connections that are subject to source NAT</description>
+ </valueHelp>
+ <constraint>
+ <regex>^(destination|source)$</regex>
+ </constraint>
+ </properties>
+ </leafNode>
+ </children>
+</node>
<leafNode name="protocol">
<properties>
<help>Protocol to match (protocol name, number, or "all")</help>