vyos-1x.git - VyOS command definitions, scripts, and utilities (mirror of https://github.com/vyos/vyos-1x.git)

Age	Commit message (Collapse)	Author
2024-08-01	T4072: firewall: extend firewall bridge capabilities, in order to include ↵	Nicolas Fort
	new chains, priorities, and firewall groups
2024-01-25	T4839: firewall: Add dynamic address group in firewall configuration, and ↵	Nicolas Fort
	appropiate commands to populate such groups using source and destination address of the packet.
2023-09-07	T4072: add firewall bridge filtering. First implementation only applies for ↵	Nicolas Fort
	forward chain and few matchers. Should be extended in the future.
2022-12-17	Merge pull request #1626 from nicolas-fort/fwall_group_interface	Christian Poessinger
	T4780: Firewall: add firewall groups in firewall. Extend matching cri…
2022-11-19	T4780: Firewall: add firewall groups in firewall. Extend matching criteria ↵	Nicolas Fort
	so this new group can be used in inbound and outbound matcher
2022-11-03	firewall: T970: Refactor domain resolver, add firewall source/destination ↵	sarthurdev
	`fqdn` node
2022-09-16	firewall: T2199: enable "auto-merge" on sets	Christian Poessinger
	vyos@vyos# show firewall +name foo { + rule 1 { + action accept + packet-length 100 + packet-length 105 + packet-length 200-300 + packet-length 220-250 + } +} will report a nftables error upon load: Error: conflicting intervals specified With nftables 1.0.3 there is an "auto-merge" option which corrects this: https://lwn.net/Articles/896732/
2022-06-14	firewall: T4147: Use named sets for firewall groups	sarthurdev
	* Refactor nftables clean-up code * Adds policy route test for using firewall groups
2022-06-10	firewall: T478: Add support for nesting groups	sarthurdev

2022-05-01	firewall: T4353: fix Jinja2 linting errors	Christian Poessinger