diff options
| author | sarthurdev <965089+sarthurdev@users.noreply.github.com> | 2023-09-28 20:04:21 +0200 |
|---|---|---|
| committer | sarthurdev <965089+sarthurdev@users.noreply.github.com> | 2023-09-28 20:21:38 +0200 |
| commit | 6eda98d14ad98c3e4d5f3cf159c7a3532a8128d7 (patch) | |
| tree | 4fe1a1f47f7fe320b06c7bf5a94c6245bd6be61b /python | |
| parent | 34772d635fa5a44db8c944b6f0a84f184a704f1d (diff) | |
| download | vyos-1x-6eda98d14ad98c3e4d5f3cf159c7a3532a8128d7.tar.gz vyos-1x-6eda98d14ad98c3e4d5f3cf159c7a3532a8128d7.zip | |
firewall: T5217: Synproxy bugfix and ct state conflict checking
Diffstat (limited to 'python')
| -rw-r--r-- | python/vyos/firewall.py | 5 |
1 files changed, 2 insertions, 3 deletions
diff --git a/python/vyos/firewall.py b/python/vyos/firewall.py index ab40688cc..9122e264e 100644 --- a/python/vyos/firewall.py +++ b/python/vyos/firewall.py @@ -263,9 +263,8 @@ def parse_rule(rule_conf, hook, fw_name, rule_id, ip_name): output.append(f'{proto} {prefix}port {operator} @P_{group_name}') - if rule_conf['action'] == 'synproxy': - if 'synproxy' in rule_conf: - output.append('ct state invalid,untracked') + if dict_search_args(rule_conf, 'action') == 'synproxy': + output.append('ct state invalid,untracked') if 'hop_limit' in rule_conf: operators = {'eq': '==', 'gt': '>', 'lt': '<'} |