diff options
| author | Christian Breunig <christian@breunig.cc> | 2026-06-18 16:19:54 +0200 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2026-06-18 16:19:54 +0200 |
| commit | 5566e3392db808839dd93a035b21b6f13a551da5 (patch) | |
| tree | 7e5afb490c497034367c894e59749ef498a92e85 /python | |
| parent | e64100195d16744db173d3217e6ec1e596c34ff1 (diff) | |
| parent | 6525f3924cf7ee529e87597e0f48f4b89370a14d (diff) | |
| download | vyos-1x-5566e3392db808839dd93a035b21b6f13a551da5.tar.gz vyos-1x-5566e3392db808839dd93a035b21b6f13a551da5.zip | |
Merge pull request #5279 from sarthurdev/T8546
firewall: T8546: Fix conntrack_required for global state-policy
Diffstat (limited to 'python')
| -rwxr-xr-x | python/vyos/firewall.py | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/python/vyos/firewall.py b/python/vyos/firewall.py index c655e2de8..c4f6d0936 100755 --- a/python/vyos/firewall.py +++ b/python/vyos/firewall.py @@ -37,6 +37,9 @@ def conntrack_required(conf): firewall = conf.get_config_dict(['firewall'], key_mangling=('-', '_'), no_tag_node_value_mangle=True, get_first_key=True) + if dict_search_args(firewall, 'global_options', 'state_policy'): + return True + for rules, path in dict_search_recursive(firewall, 'rule'): if any(('state' in rule_conf or 'connection_status' in rule_conf or 'offload_target' in rule_conf) for rule_conf in rules.values()): return True |