diff options
| author | Christian Poessinger <christian@poessinger.com> | 2022-01-17 18:08:34 +0100 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2022-01-17 18:08:34 +0100 |
| commit | 9fb2e1432209f907d6e5e3ce748da243c85f2851 (patch) | |
| tree | 0f3607ccd75cfad67f25ba06b62bdaa1232874fb /src/validators/tcp-flag | |
| parent | 7e731c0ef503334eaab2bfd723163a9749d64da2 (diff) | |
| parent | 53c2b62dda5bcd1f605a8b9ea438f0f76e366e36 (diff) | |
| download | vyos-1x-9fb2e1432209f907d6e5e3ce748da243c85f2851.tar.gz vyos-1x-9fb2e1432209f907d6e5e3ce748da243c85f2851.zip | |
Merge pull request #1174 from sarthurdev/firewall
firewall: T4178: T3873: tcp flags syntax refactor, intra-zone-filtering fix
Diffstat (limited to 'src/validators/tcp-flag')
| -rwxr-xr-x | src/validators/tcp-flag | 14 |
1 files changed, 6 insertions, 8 deletions
diff --git a/src/validators/tcp-flag b/src/validators/tcp-flag index 86ebec189..1496b904a 100755 --- a/src/validators/tcp-flag +++ b/src/validators/tcp-flag @@ -5,14 +5,12 @@ import re if __name__ == '__main__': if len(sys.argv)>1: - flags = sys.argv[1].split(",") - - for flag in flags: - if flag and flag[0] == '!': - flag = flag[1:] - if flag.lower() not in ['syn', 'ack', 'rst', 'fin', 'urg', 'psh']: - print(f'Error: {flag} is not a valid TCP flag') - sys.exit(1) + flag = sys.argv[1] + if flag and flag[0] == '!': + flag = flag[1:] + if flag not in ['syn', 'ack', 'rst', 'fin', 'urg', 'psh', 'ecn', 'cwr']: + print(f'Error: {flag} is not a valid TCP flag') + sys.exit(1) else: sys.exit(2) |