summaryrefslogtreecommitdiff
path: root/interface-definitions
diff options
context:
space:
mode:
authorChristian Breunig <christian@breunig.cc>2024-02-01 20:32:04 +0100
committerChristian Breunig <christian@breunig.cc>2024-02-01 21:40:04 +0100
commit7134ab4b9f03b6038d3129130582267cc39a9c22 (patch)
tree176612446d49b1eee8077e3ecf4a076ec24422da /interface-definitions
parent97c04c16303a41897fd77cefa1cfd360671f2d1e (diff)
downloadvyos-1x-7134ab4b9f03b6038d3129130582267cc39a9c22.tar.gz
vyos-1x-7134ab4b9f03b6038d3129130582267cc39a9c22.zip
dns forwarding: T5687: add missing constraints on ecs-add-for CLI node
Completion help suggests only IPv4 and IPv6 prefixes are supported, thus add a proper constraint enforcing this. (cherry picked from commit 049560725b93de49ec2d5a779e391e61d568ceb6)
Diffstat (limited to 'interface-definitions')
-rw-r--r--interface-definitions/service_dns_forwarding.xml.in18
1 files changed, 16 insertions, 2 deletions
diff --git a/interface-definitions/service_dns_forwarding.xml.in b/interface-definitions/service_dns_forwarding.xml.in
index 788f0c18e..a54618e82 100644
--- a/interface-definitions/service_dns_forwarding.xml.in
+++ b/interface-definitions/service_dns_forwarding.xml.in
@@ -745,12 +745,26 @@
<help>Client netmask for which EDNS Client Subnet will be added</help>
<valueHelp>
<format>ipv4net</format>
- <description>IP addresses or subnets, negation supported</description>
+ <description>IPv4 prefix to match</description>
+ </valueHelp>
+ <valueHelp>
+ <format>!ipv4net</format>
+ <description>Match everything except the specified IPv4 prefix</description>
</valueHelp>
<valueHelp>
<format>ipv6net</format>
- <description>IPv6 addresses or subnets, negation supported</description>
+ <description>IPv6 prefix to match</description>
+ </valueHelp>
+ <valueHelp>
+ <format>!ipv6net</format>
+ <description>Match everything except the specified IPv6 prefix</description>
</valueHelp>
+ <constraint>
+ <validator name="ipv4-prefix"/>
+ <validator name="ipv4-prefix-exclude"/>
+ <validator name="ipv6-prefix"/>
+ <validator name="ipv6-prefix-exclude"/>
+ </constraint>
<multi/>
</properties>
</leafNode>