summaryrefslogtreecommitdiff
path: root/src/conf_mode
diff options
context:
space:
mode:
authorsarthurdev <965089+sarthurdev@users.noreply.github.com>2022-06-05 10:59:47 +0200
committersarthurdev <965089+sarthurdev@users.noreply.github.com>2022-06-05 10:59:47 +0200
commitd1bdf2b9d80d2e34b7370823d6f684102d7c9f4e (patch)
treea39307f088a78d4e0b9503a2a9a0d612c949c31c /src/conf_mode
parente990b2f4c045f5d1be02915ec7d8869d5475ed4e (diff)
downloadvyos-1x-d1bdf2b9d80d2e34b7370823d6f684102d7c9f4e.tar.gz
vyos-1x-d1bdf2b9d80d2e34b7370823d6f684102d7c9f4e.zip
firewall: T970: Maintain a domain state to fallback if resolution fails
Diffstat (limited to 'src/conf_mode')
-rwxr-xr-xsrc/conf_mode/firewall.py3
1 files changed, 2 insertions, 1 deletions
diff --git a/src/conf_mode/firewall.py b/src/conf_mode/firewall.py
index 3c6aff386..335098bf1 100755
--- a/src/conf_mode/firewall.py
+++ b/src/conf_mode/firewall.py
@@ -427,7 +427,8 @@ def apply(firewall):
domains.append(address)
# Add elements to domain-group, try to resolve domain => ip
# and add elements to nft set
- elements = get_ips_domains_dict(domains)
+ ip_dict = get_ips_domains_dict(domains)
+ elements = sum(ip_dict.values(), [])
nft_init_set(group)
nft_add_set_elements(group, elements)
else: