diff options
| author | sarthurdev <965089+sarthurdev@users.noreply.github.com> | 2025-11-06 11:14:08 +0100 |
|---|---|---|
| committer | sarthurdev <965089+sarthurdev@users.noreply.github.com> | 2026-01-21 11:52:29 +0100 |
| commit | 8a329ef98eb120cc91aac6f7da6cd61dbc1ab950 (patch) | |
| tree | 6774bb1e504fd6edaaf0673b48426a62d65b4bc9 /src/conf_mode | |
| parent | 7f6f94370ec04ce48e7a19880a74ba0c25f7bfb5 (diff) | |
| download | vyos-1x-8a329ef98eb120cc91aac6f7da6cd61dbc1ab950.tar.gz vyos-1x-8a329ef98eb120cc91aac6f7da6cd61dbc1ab950.zip | |
geoip: T8049: Add MaxMind database support
Diffstat (limited to 'src/conf_mode')
| -rwxr-xr-x | src/conf_mode/firewall.py | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/src/conf_mode/firewall.py b/src/conf_mode/firewall.py index 18c250d08..02c9b2e3e 100755 --- a/src/conf_mode/firewall.py +++ b/src/conf_mode/firewall.py @@ -491,6 +491,12 @@ def verify(firewall): for ifname in interfaces: verify_hardware_offload(ifname) + if dict_search_args(firewall, 'global_options', 'geoip', 'provider') == 'maxmind': + geoip_options = dict_search_args(firewall, 'global_options', 'geoip') + required_keys = ['maxmind_account_id', 'maxmind_license_key'] + if not all(key in geoip_options for key in required_keys): + raise ConfigError('MaxMind GeoIP provider requires maxmind-account-id and maxmind-license-key') + if dict_search('global_options.state_policy', firewall) is not None: # Generate list of chains where conntrack is disabled conntrack_disabled_list = [] |