diff options
| author | John Estabrook <jestabro@vyos.io> | 2026-08-11 10:53:51 -0500 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2026-08-11 10:53:51 -0500 |
| commit | 7767004a4d2368dd7f9c6b3876f312944a4ce862 (patch) | |
| tree | 167e9f53029562775a04a231ab68b585a9354ccd /interface-definitions/include | |
| parent | dadeaf21e70712ecd617ddd4850bc8e9f599a973 (diff) | |
| parent | 66e4cbec33487ce789d0774825f01e830ab8bbf7 (diff) | |
| download | vyos-1x-7767004a4d2368dd7f9c6b3876f312944a4ce862.tar.gz vyos-1x-7767004a4d2368dd7f9c6b3876f312944a4ce862.zip | |
Merge pull request #5365 from l0crian1/last-used
firewall: T8221: Add last-used option to firewall rules
Diffstat (limited to 'interface-definitions/include')
8 files changed, 16 insertions, 3 deletions
diff --git a/interface-definitions/include/firewall/common-rule-bridge.xml.i b/interface-definitions/include/firewall/common-rule-bridge.xml.i index 80088bbec..f639001a1 100644 --- a/interface-definitions/include/firewall/common-rule-bridge.xml.i +++ b/interface-definitions/include/firewall/common-rule-bridge.xml.i @@ -7,6 +7,7 @@ #include <include/firewall/hop-limit.xml.i> #include <include/firewall/icmp.xml.i> #include <include/firewall/icmpv6.xml.i> +#include <include/firewall/last-used.xml.i> #include <include/firewall/limit.xml.i> #include <include/firewall/log.xml.i> #include <include/firewall/log-options.xml.i> diff --git a/interface-definitions/include/firewall/common-rule-ipv4-raw.xml.i b/interface-definitions/include/firewall/common-rule-ipv4-raw.xml.i index 85f1071a6..27057637b 100644 --- a/interface-definitions/include/firewall/common-rule-ipv4-raw.xml.i +++ b/interface-definitions/include/firewall/common-rule-ipv4-raw.xml.i @@ -6,6 +6,7 @@ #include <include/firewall/fragment.xml.i> #include <include/generic-disable-node.xml.i> #include <include/firewall/icmp.xml.i> +#include <include/firewall/last-used.xml.i> #include <include/firewall/limit.xml.i> #include <include/firewall/log.xml.i> #include <include/firewall/log-options.xml.i> diff --git a/interface-definitions/include/firewall/common-rule-ipv4.xml.i b/interface-definitions/include/firewall/common-rule-ipv4.xml.i index b6c1b13b3..07d2cfff8 100644 --- a/interface-definitions/include/firewall/common-rule-ipv4.xml.i +++ b/interface-definitions/include/firewall/common-rule-ipv4.xml.i @@ -2,6 +2,7 @@ #include <include/firewall/add-addr-to-group-ipv4.xml.i> #include <include/firewall/common-rule-inet.xml.i> #include <include/firewall/icmp.xml.i> +#include <include/firewall/last-used.xml.i> #include <include/firewall/ttl.xml.i> <node name="destination"> <properties> diff --git a/interface-definitions/include/firewall/common-rule-ipv6-raw.xml.i b/interface-definitions/include/firewall/common-rule-ipv6-raw.xml.i index 3f7c5a0a3..1c1686a00 100644 --- a/interface-definitions/include/firewall/common-rule-ipv6-raw.xml.i +++ b/interface-definitions/include/firewall/common-rule-ipv6-raw.xml.i @@ -6,6 +6,7 @@ #include <include/firewall/fragment.xml.i> #include <include/generic-disable-node.xml.i> #include <include/firewall/icmpv6.xml.i> +#include <include/firewall/last-used.xml.i> #include <include/firewall/limit.xml.i> #include <include/firewall/log.xml.i> #include <include/firewall/log-options.xml.i> @@ -46,4 +47,4 @@ #include <include/firewall/source-destination-dynamic-group-ipv6.xml.i> </children> </node> -<!-- include end -->
\ No newline at end of file +<!-- include end --> diff --git a/interface-definitions/include/firewall/common-rule-ipv6.xml.i b/interface-definitions/include/firewall/common-rule-ipv6.xml.i index 65ec415fb..657868c7a 100644 --- a/interface-definitions/include/firewall/common-rule-ipv6.xml.i +++ b/interface-definitions/include/firewall/common-rule-ipv6.xml.i @@ -3,6 +3,7 @@ #include <include/firewall/common-rule-inet.xml.i> #include <include/firewall/hop-limit.xml.i> #include <include/firewall/icmpv6.xml.i> +#include <include/firewall/last-used.xml.i> <node name="destination"> <properties> <help>Destination parameters</help> diff --git a/interface-definitions/include/firewall/ipv4-hook-prerouting.xml.i b/interface-definitions/include/firewall/ipv4-hook-prerouting.xml.i index 6f9fe6842..5be37d018 100644 --- a/interface-definitions/include/firewall/ipv4-hook-prerouting.xml.i +++ b/interface-definitions/include/firewall/ipv4-hook-prerouting.xml.i @@ -53,4 +53,4 @@ </node> </children> </node> -<!-- include end -->
\ No newline at end of file +<!-- include end --> diff --git a/interface-definitions/include/firewall/ipv6-hook-prerouting.xml.i b/interface-definitions/include/firewall/ipv6-hook-prerouting.xml.i index 15454bbbf..b496696d4 100644 --- a/interface-definitions/include/firewall/ipv6-hook-prerouting.xml.i +++ b/interface-definitions/include/firewall/ipv6-hook-prerouting.xml.i @@ -53,4 +53,4 @@ </node> </children> </node> -<!-- include end -->
\ No newline at end of file +<!-- include end --> diff --git a/interface-definitions/include/firewall/last-used.xml.i b/interface-definitions/include/firewall/last-used.xml.i new file mode 100644 index 000000000..90f8c916f --- /dev/null +++ b/interface-definitions/include/firewall/last-used.xml.i @@ -0,0 +1,8 @@ +<!-- include start from firewall/last-used.xml.i --> +<leafNode name="last-used"> + <properties> + <help>Track the last time this rule matched traffic</help> + <valueless/> + </properties> +</leafNode> +<!-- include end --> |