diff options
| author | Christian Breunig <christian@breunig.cc> | 2024-02-01 21:41:07 +0100 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2024-02-01 21:41:07 +0100 |
| commit | b24e2cbef7fc5c4b2a1a4533ff75e01dea0c2b42 (patch) | |
| tree | ab74c9d546390b4c5585fe740d0898374df6d1b6 /src/conf_mode/nat.py | |
| parent | cd4b03898e99b7317d2cbdf614bc14caf2e9bbce (diff) | |
| parent | 3ce9583b9420ed72cf45728f439f00b1c4cf5800 (diff) | |
| download | vyos-1x-b24e2cbef7fc5c4b2a1a4533ff75e01dea0c2b42.tar.gz vyos-1x-b24e2cbef7fc5c4b2a1a4533ff75e01dea0c2b42.zip | |
Merge pull request #2924 from vyos/mergify/bp/sagitta/pr-2756
T4839: firewall: Add dynamic address group in firewall configuration (backport #2756)
Diffstat (limited to 'src/conf_mode/nat.py')
| -rwxr-xr-x | src/conf_mode/nat.py | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/src/conf_mode/nat.py b/src/conf_mode/nat.py index bd9b5162c..26822b755 100755 --- a/src/conf_mode/nat.py +++ b/src/conf_mode/nat.py @@ -69,6 +69,10 @@ def get_config(config=None): nat['firewall_group'] = conf.get_config_dict(['firewall', 'group'], key_mangling=('-', '_'), get_first_key=True, no_tag_node_value_mangle=True) + # Remove dynamic firewall groups if present: + if 'dynamic_group' in nat['firewall_group']: + del nat['firewall_group']['dynamic_group'] + return nat def verify_rule(config, err_msg, groups_dict): |