summaryrefslogtreecommitdiff
path: root/python
diff options
context:
space:
mode:
authorChristian Breunig <christian@breunig.cc>2026-10-30 19:56:00 +0100
committerGitHub <noreply@github.com>2026-10-30 19:56:00 +0100
commit91bf0ef51026b82f5714c809d6d651a8b9c7aacb (patch)
treecede742c30e0ed13e068a93c3390c9e54d083842 /python
parent73f8ebb182046cf1d133b437744bebc640cb9811 (diff)
parent09db828b4fd02380e8d317d09afe6f7f3c484caf (diff)
downloadvyos-1x-91bf0ef51026b82f5714c809d6d651a8b9c7aacb.tar.gz
vyos-1x-91bf0ef51026b82f5714c809d6d651a8b9c7aacb.zip
Merge pull request #5610 from natali-rs1985/T9544
firewall: T9544: Fix fqdn match in prerouting raw rules
Diffstat (limited to 'python')
-rwxr-xr-xpython/vyos/firewall.py5
1 files changed, 3 insertions, 2 deletions
diff --git a/python/vyos/firewall.py b/python/vyos/firewall.py
index 5cc6cc3db..81c5a27b8 100755
--- a/python/vyos/firewall.py
+++ b/python/vyos/firewall.py
@@ -59,9 +59,10 @@ def fqdn_config_parse(config, node):
suffix = path[5][0]
set_name = f'{hook_name}_{priority}_{rule}_{suffix}'
- if (path[0] == 'ipv4') and (path[1] == 'forward' or path[1] == 'input' or path[1] == 'output' or path[1] == 'name'):
+ fqdn_hooks = ['forward', 'input', 'output', 'prerouting', 'name']
+ if (path[0] == 'ipv4') and (path[1] in fqdn_hooks):
config['ip_fqdn'][set_name] = domain
- elif (path[0] == 'ipv6') and (path[1] == 'forward' or path[1] == 'input' or path[1] == 'output' or path[1] == 'name'):
+ elif (path[0] == 'ipv6') and (path[1] in fqdn_hooks):
if path[1] == 'name':
set_name = f'name6_{priority}_{rule}_{suffix}'
config['ip6_fqdn'][set_name] = domain