diff options
| author | Christian Breunig <christian@breunig.cc> | 2024-02-01 20:32:04 +0100 |
|---|---|---|
| committer | Christian Breunig <christian@breunig.cc> | 2024-02-01 21:40:04 +0100 |
| commit | 7134ab4b9f03b6038d3129130582267cc39a9c22 (patch) | |
| tree | 176612446d49b1eee8077e3ecf4a076ec24422da /interface-definitions/service_dns_forwarding.xml.in | |
| parent | 97c04c16303a41897fd77cefa1cfd360671f2d1e (diff) | |
| download | vyos-1x-7134ab4b9f03b6038d3129130582267cc39a9c22.tar.gz vyos-1x-7134ab4b9f03b6038d3129130582267cc39a9c22.zip | |
dns forwarding: T5687: add missing constraints on ecs-add-for CLI node
Completion help suggests only IPv4 and IPv6 prefixes are supported, thus add a
proper constraint enforcing this.
(cherry picked from commit 049560725b93de49ec2d5a779e391e61d568ceb6)
Diffstat (limited to 'interface-definitions/service_dns_forwarding.xml.in')
| -rw-r--r-- | interface-definitions/service_dns_forwarding.xml.in | 18 |
1 files changed, 16 insertions, 2 deletions
diff --git a/interface-definitions/service_dns_forwarding.xml.in b/interface-definitions/service_dns_forwarding.xml.in index 788f0c18e..a54618e82 100644 --- a/interface-definitions/service_dns_forwarding.xml.in +++ b/interface-definitions/service_dns_forwarding.xml.in @@ -745,12 +745,26 @@ <help>Client netmask for which EDNS Client Subnet will be added</help> <valueHelp> <format>ipv4net</format> - <description>IP addresses or subnets, negation supported</description> + <description>IPv4 prefix to match</description> + </valueHelp> + <valueHelp> + <format>!ipv4net</format> + <description>Match everything except the specified IPv4 prefix</description> </valueHelp> <valueHelp> <format>ipv6net</format> - <description>IPv6 addresses or subnets, negation supported</description> + <description>IPv6 prefix to match</description> + </valueHelp> + <valueHelp> + <format>!ipv6net</format> + <description>Match everything except the specified IPv6 prefix</description> </valueHelp> + <constraint> + <validator name="ipv4-prefix"/> + <validator name="ipv4-prefix-exclude"/> + <validator name="ipv6-prefix"/> + <validator name="ipv6-prefix-exclude"/> + </constraint> <multi/> </properties> </leafNode> |