index
:
vyos-1x.git
T6674-circ-trigger
T6712-motd-80-25-terminal
T6732-build-image-circinus
T6732-reusable-build-image
T6732-reusable-build-package
T7064-add-mirror-workflow-current
T7065-pr-mirror-trigger-restrict
c-po-patch-1
circinus
circinus-merge-commit-handling
circinus-public-unmaintained
circinus-temp-bot-test
crux
current
current-merge-commit-handling
equuleus
fix/T8859-dh-keysize-validation
fix/T8955-http-api-verify-tls
mergify/bp/circinus/pr-3524
mergify/bp/circinus/pr-3576
mergify/bp/circinus/pr-3656
mergify/bp/circinus/pr-3675
mergify/bp/circinus/pr-3698
mergify/bp/circinus/pr-3711
mergify/bp/circinus/pr-3715
mergify/bp/circinus/pr-3747
mergify/bp/circinus/pr-3753
mergify/bp/circinus/pr-3756
mergify/bp/circinus/pr-3763
mergify/bp/circinus/pr-3790
mergify/bp/circinus/pr-3805
mergify/bp/circinus/pr-3810
mergify/bp/circinus/pr-3813
mergify/bp/circinus/pr-3817
mergify/bp/circinus/pr-3823
mergify/bp/circinus/pr-3825
mergify/bp/circinus/pr-3827
mergify/bp/circinus/pr-3828
mergify/bp/circinus/pr-3832
mergify/bp/circinus/pr-3833
mergify/bp/circinus/pr-3834
mergify/bp/circinus/pr-3838
mergify/bp/circinus/pr-3841
mergify/bp/circinus/pr-3850
mergify/bp/circinus/pr-3853
mergify/bp/circinus/pr-3856
mergify/bp/circinus/pr-3857
mergify/bp/circinus/pr-3868
mergify/bp/circinus/pr-3874
mergify/bp/circinus/pr-3883
mergify/bp/circinus/pr-3888
mergify/bp/circinus/pr-3889
mergify/bp/circinus/pr-3903
mergify/bp/circinus/pr-3915
mergify/bp/circinus/pr-3916
mergify/bp/circinus/pr-3920
mergify/bp/circinus/pr-3923
mergify/bp/circinus/pr-3927
mergify/bp/circinus/pr-3930
mergify/bp/circinus/pr-3932
mergify/bp/circinus/pr-3933
mergify/bp/circinus/pr-3937
mergify/bp/circinus/pr-3945
mergify/bp/circinus/pr-3949
mergify/bp/circinus/pr-3955
mergify/bp/circinus/pr-3960
mergify/bp/circinus/pr-3961
mergify/bp/circinus/pr-3964
mergify/bp/circinus/pr-3980
mergify/bp/circinus/pr-3981
mergify/bp/circinus/pr-3987
mergify/bp/circinus/pr-3988
mergify/bp/circinus/pr-3989
mergify/bp/circinus/pr-3997
mergify/bp/circinus/pr-4000
mergify/bp/circinus/pr-4001
mergify/bp/circinus/pr-4002
mergify/bp/circinus/pr-4003
mergify/bp/circinus/pr-4015
mergify/bp/circinus/pr-4022
mergify/bp/circinus/pr-4024
mergify/bp/circinus/pr-4028
mergify/bp/circinus/pr-4030
mergify/bp/circinus/pr-4032
mergify/bp/circinus/pr-4034
mergify/bp/circinus/pr-4038
mergify/bp/circinus/pr-4046
mergify/bp/circinus/pr-4047
mergify/bp/circinus/pr-4054
mergify/bp/circinus/pr-4057
mergify/bp/circinus/pr-4061
mergify/bp/circinus/pr-4067
mergify/bp/circinus/pr-4069
mergify/bp/circinus/pr-4071
mergify/bp/circinus/pr-4077
mergify/bp/circinus/pr-4079
mergify/bp/circinus/pr-4086
mergify/bp/circinus/pr-4087
mergify/bp/circinus/pr-4091
mergify/bp/circinus/pr-4099
mergify/bp/circinus/pr-4112
mergify/bp/circinus/pr-4118
mergify/bp/circinus/pr-4122
mergify/bp/circinus/pr-4126
mergify/bp/circinus/pr-4129
mergify/bp/circinus/pr-4131
mergify/bp/circinus/pr-4132
mergify/bp/current/pr-4148
mergify/bp/equuleus/pr-3949
mergify/bp/sagitta/pr-3428
mergify/bp/sagitta/pr-3524
mergify/bp/sagitta/pr-3576
mergify/bp/sagitta/pr-3698
mergify/bp/sagitta/pr-3715
mergify/bp/sagitta/pr-3747
mergify/bp/sagitta/pr-3748
mergify/bp/sagitta/pr-3753
mergify/bp/sagitta/pr-3756
mergify/bp/sagitta/pr-3763
mergify/bp/sagitta/pr-3790
mergify/bp/sagitta/pr-3805
mergify/bp/sagitta/pr-3810
mergify/bp/sagitta/pr-3813
mergify/bp/sagitta/pr-3827
mergify/bp/sagitta/pr-3828
mergify/bp/sagitta/pr-3832
mergify/bp/sagitta/pr-3833
mergify/bp/sagitta/pr-3834
mergify/bp/sagitta/pr-3838
mergify/bp/sagitta/pr-3841
mergify/bp/sagitta/pr-3850
mergify/bp/sagitta/pr-3853
mergify/bp/sagitta/pr-3856
mergify/bp/sagitta/pr-3857
mergify/bp/sagitta/pr-3861
mergify/bp/sagitta/pr-3868
mergify/bp/sagitta/pr-3873
mergify/bp/sagitta/pr-3874
mergify/bp/sagitta/pr-3883
mergify/bp/sagitta/pr-3888
mergify/bp/sagitta/pr-3889
mergify/bp/sagitta/pr-3903
mergify/bp/sagitta/pr-3915
mergify/bp/sagitta/pr-3916
mergify/bp/sagitta/pr-3920
mergify/bp/sagitta/pr-3923
mergify/bp/sagitta/pr-3945
mergify/bp/sagitta/pr-3949
mergify/bp/sagitta/pr-3960
mergify/bp/sagitta/pr-3961
mergify/bp/sagitta/pr-3964
mergify/bp/sagitta/pr-3980
mergify/bp/sagitta/pr-3981
mergify/bp/sagitta/pr-3988
mergify/bp/sagitta/pr-3989
mergify/bp/sagitta/pr-3997
mergify/bp/sagitta/pr-4000
mergify/bp/sagitta/pr-4001
mergify/bp/sagitta/pr-4002
mergify/bp/sagitta/pr-4003
mergify/bp/sagitta/pr-4015
mergify/bp/sagitta/pr-4022
mergify/bp/sagitta/pr-4028
mergify/bp/sagitta/pr-4032
mergify/bp/sagitta/pr-4034
mergify/bp/sagitta/pr-4047
mergify/bp/sagitta/pr-4057
mergify/bp/sagitta/pr-4061
mergify/bp/sagitta/pr-4071
mergify/bp/sagitta/pr-4079
mergify/bp/sagitta/pr-4091
mergify/bp/sagitta/pr-4099
mergify/bp/sagitta/pr-4112
mergify/bp/sagitta/pr-4129
mergify/bp/sagitta/pr-4131
mergify/bp/sagitta/pr-4132
pr-template
revert-4390-feature/T6353-add-password-complexity-validation
rolling
sagitta
sagitta-public-unmaintained
sever-sever
sever-sever-patch-1
syslog-typos-T6989
yevhen
yevhen-secrets
VyOS command definitions, scripts, and utilities (mirror of https://github.com/vyos/vyos-1x.git)
summary
refs
log
tree
commit
diff
log msg
author
committer
range
path:
root
/
src
/
conf_mode
/
firewall.py
Age
Commit message (
Expand
)
Author
13 days
firewall: T8761: re-introduce VRF interface names in generated firewall config
David Vølker
2026-06-04
geoip: T5746: Add GeoIP ASN support
sarthurdev
2026-05-19
geoip: T8590: fix initialization failure and set clobbering on boot and commit
xTITUSMAXIMUSX
2026-03-31
firewall: T8446: Prevent chain with offload rule on local zone
sarthurdev
2026-01-21
geoip: T8049: Add MaxMind database support
sarthurdev
2026-01-21
geoip: T7926: Refactor geoip handling
sarthurdev
2025-11-24
Merge pull request #4672 from apschultz/zone_default_firewall_ruleset
Simon
2025-11-05
firewall: T7112: Default action drop fails
Oleksandr Kuchmystyi
2025-10-21
firewall: T7739: Default ruleset for firewall zones
Adam Schultz
2025-09-05
Firewall: T7475: Disable conntrack per firewall chain
l0crian1
2025-09-04
T7366: Firewall rules allow empty nodes
l0crian1
2025-06-28
T7591: remove copyright years from source files
Christian Breunig
2025-05-20
Merge pull request #4468 from sarthurdev/T5707
Daniil Baturin
2025-04-25
resolver: T4930: Fix always True on glob check
sarthurdev
2025-04-25
Merge pull request #4457 from l0crian1/t7358-add-offload-to-global-state
Viacheslav Hletenko
2025-04-16
firewall: T7358: add offload option to global state policy
l0crian1
2025-03-28
geoip: T5636: Add geoip for policy route/route6
sskaje
2025-03-21
firewall: T5493: Implement remote-group
Alex W
2025-01-06
T6841: firewall: Fixed issues in ZBF when using VRFs
aapostoliuk
2025-01-06
T6841: firewall: improve config parsing for ZBF when using VRFs and interface...
Nicolas Fort
2024-12-30
T6983: treat vyos-domain-resolver as a real service (#4261)
Christian Breunig
2024-09-16
T6687: add fqdn support to nat rules.
Nicolas Fort
2024-08-12
configverify: T6642: verify_interface_exists requires config_dict arg
John Estabrook
2024-08-04
firewall: T4694: Adding GRE flags & fields matches to firewall rules
Andrew Topp
2024-08-02
T4072: change same helpers in xml definitions; add notrack action for prerout...
Nicolas Fort
2024-08-01
T4072: firewall: improve error handling when firewall configuration is wrong....
Nicolas Fort
2024-07-28
firewall: T4694: Adding rt ipsec exists/missing match to firewall configs (#3...
talmakion
2024-06-09
firewall: T3900: T6394: remove unused import
Christian Breunig
2024-06-04
T3900: T6394: extend functionalities in firewall; move netfilter sysctl timeo...
Nicolas Fort
2024-05-15
T3900: add support for raw table in firewall.
Nicolas Fort
2024-04-15
T5535: firewall: migrate command <set system ip disable-directed-broadcast> t...
Nicolas Fort
2024-04-01
firewall: T2199: always use full nft command name (e.g. --file over -f)
Christian Breunig
2024-03-18
T6136: add error checks when using dynamic firewall groups
Nicolas Fort
2024-03-05
T6075: firewall and NAT: check if interface-group exists when using them in f...
Nicolas Fort
2023-12-31
T5474: establish common file name pattern for XML conf mode commands
Christian Breunig
2023-12-24
T5837: cleanup use of calls to vyos.configdict.node_changed()
Christian Breunig
2023-11-10
T5729: firewall: switch to valueless in order to remove unnecessary <enable|d...
Nicolas Fort
2023-10-25
T5681: Firewall,Nat and Nat66: simplified and standarize interface matcher (v...
Nicolas Fort
2023-10-13
T5541: firewall zone: re add firewall zone-base firewall
Nicolas Fort
2023-09-28
firewall: T5217: Synproxy bugfix and ct state conflict checking
sarthurdev
2023-09-21
T5217: Add firewall synproxy
Viacheslav Hletenko
2023-09-19
firewall: ethernet: T4502: Add interface offload node and verify interface su...
sarthurdev
2023-09-19
firewall: T4502: Update to flowtable CLI
sarthurdev
2023-09-16
conntrack: T5571: Refactor conntrack to be independent conf script from firew...
sarthurdev
2023-09-09
T4502: firewall: Add software flow offload using flowtable
Yuxiang Zhu
2023-08-26
firewall: T5080: Disable conntrack unless required by rules
sarthurdev
2023-08-26
Merge pull request #2163 from sarthurdev/firewall_rpfilter
Christian Breunig
2023-08-25
T5502: firewall: add validator for interface matcher, and allow only interfac...
Nicolas Fort
2023-08-25
firewall: T3509: Add support for IPv6 return path filtering
sarthurdev
2023-08-15
T5478: remove config-trap configuration parser in firewall
Nicolas Fort
[next]