From 6525f3924cf7ee529e87597e0f48f4b89370a14d Mon Sep 17 00:00:00 2001 From: sarthurdev <965089+sarthurdev@users.noreply.github.com> Date: Wed, 17 Jun 2026 11:04:18 +0200 Subject: firewall: T8546: Fix conntrack_required for global state-policy --- python/vyos/firewall.py | 3 +++ 1 file changed, 3 insertions(+) (limited to 'python') diff --git a/python/vyos/firewall.py b/python/vyos/firewall.py index c655e2de8..c4f6d0936 100755 --- a/python/vyos/firewall.py +++ b/python/vyos/firewall.py @@ -37,6 +37,9 @@ def conntrack_required(conf): firewall = conf.get_config_dict(['firewall'], key_mangling=('-', '_'), no_tag_node_value_mangle=True, get_first_key=True) + if dict_search_args(firewall, 'global_options', 'state_policy'): + return True + for rules, path in dict_search_recursive(firewall, 'rule'): if any(('state' in rule_conf or 'connection_status' in rule_conf or 'offload_target' in rule_conf) for rule_conf in rules.values()): return True -- cgit v1.2.3