diff options
| author | Christian Breunig <christian@breunig.cc> | 2026-10-17 21:43:01 +0200 |
|---|---|---|
| committer | Christian Breunig <christian@breunig.cc> | 2026-10-17 21:43:01 +0200 |
| commit | 8d40cc543f723f89102772b0ad99c482795e1d77 (patch) | |
| tree | 4bcb4fcff2129755218b5a95e996810c51705827 /src/migration-scripts | |
| parent | eaf52ce6c13a683534a1b35a1bed074f044fbb3c (diff) | |
| download | vyos-1x-8d40cc543f723f89102772b0ad99c482795e1d77.tar.gz vyos-1x-8d40cc543f723f89102772b0ad99c482795e1d77.zip | |
firewall: T9474: match time windows crossing midnight in UTC
Rules with a start and stop time were rendered as two separate hour
comparisons. nft converts both to UTC when loading the ruleset, so a window
crossing midnight in UTC never matched - e.g. 22:00-06:00 anywhere, or
01:00-02:00 on a system running in CEST. A start or stop time on its own
had the same problem.
Hours are now rendered as a single range, which nft turns into its
complement when it wraps around midnight. A missing start or stop defaults
to the beginning or end of the day.
Diffstat (limited to 'src/migration-scripts')
0 files changed, 0 insertions, 0 deletions