diff options
| author | sarthurdev <965089+sarthurdev@users.noreply.github.com> | 2026-06-17 11:04:18 +0200 |
|---|---|---|
| committer | sarthurdev <965089+sarthurdev@users.noreply.github.com> | 2026-06-17 13:28:38 +0200 |
| commit | 6525f3924cf7ee529e87597e0f48f4b89370a14d (patch) | |
| tree | 0ae4acf0fba9a92753cf64b7f350d5523d9c2c86 /python | |
| parent | 88dfc8cd43521ae489900fb9746c56545140df54 (diff) | |
| download | vyos-1x-6525f3924cf7ee529e87597e0f48f4b89370a14d.tar.gz vyos-1x-6525f3924cf7ee529e87597e0f48f4b89370a14d.zip | |
firewall: T8546: Fix conntrack_required for global state-policy
Diffstat (limited to 'python')
| -rwxr-xr-x | python/vyos/firewall.py | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/python/vyos/firewall.py b/python/vyos/firewall.py index c655e2de8..c4f6d0936 100755 --- a/python/vyos/firewall.py +++ b/python/vyos/firewall.py @@ -37,6 +37,9 @@ def conntrack_required(conf): firewall = conf.get_config_dict(['firewall'], key_mangling=('-', '_'), no_tag_node_value_mangle=True, get_first_key=True) + if dict_search_args(firewall, 'global_options', 'state_policy'): + return True + for rules, path in dict_search_recursive(firewall, 'rule'): if any(('state' in rule_conf or 'connection_status' in rule_conf or 'offload_target' in rule_conf) for rule_conf in rules.values()): return True |