summaryrefslogtreecommitdiff
path: root/src/conf_mode/firewall.py
diff options
context:
space:
mode:
authorViacheslav Hletenko <v.gletenko@vyos.io>2022-06-05 12:20:38 +0300
committerViacheslav Hletenko <v.gletenko@vyos.io>2022-06-05 09:22:31 +0000
commit654c403cebe3cdbfa7a36348c75191b47f882ac9 (patch)
treea39307f088a78d4e0b9503a2a9a0d612c949c31c /src/conf_mode/firewall.py
parente990b2f4c045f5d1be02915ec7d8869d5475ed4e (diff)
parentd1bdf2b9d80d2e34b7370823d6f684102d7c9f4e (diff)
downloadvyos-1x-654c403cebe3cdbfa7a36348c75191b47f882ac9.tar.gz
vyos-1x-654c403cebe3cdbfa7a36348c75191b47f882ac9.zip
Merge pull request #2 from sarthurdev/T970
firewall: T970: Maintain a domain state to fallback if resolution fails
Diffstat (limited to 'src/conf_mode/firewall.py')
-rwxr-xr-xsrc/conf_mode/firewall.py3
1 files changed, 2 insertions, 1 deletions
diff --git a/src/conf_mode/firewall.py b/src/conf_mode/firewall.py
index 3c6aff386..335098bf1 100755
--- a/src/conf_mode/firewall.py
+++ b/src/conf_mode/firewall.py
@@ -427,7 +427,8 @@ def apply(firewall):
domains.append(address)
# Add elements to domain-group, try to resolve domain => ip
# and add elements to nft set
- elements = get_ips_domains_dict(domains)
+ ip_dict = get_ips_domains_dict(domains)
+ elements = sum(ip_dict.values(), [])
nft_init_set(group)
nft_add_set_elements(group, elements)
else: