From 654c8cad2daaf84a07e4664d2c0469a863a46bdc Mon Sep 17 00:00:00 2001
From: Viacheslav Hletenko <v.gletenko@vyos.io>
Date: Tue, 25 May 2021 23:17:16 +0300
Subject: firewall: T3568: add XML definitions for firewall

Add XML for configuration mode firewall. Used for future rewriting it to Python style.
---
 src/validators/ipv6-exclude       |  7 +++++++
 src/validators/ipv6-range         | 16 ++++++++++++++++
 src/validators/ipv6-range-exclude |  7 +++++++
 3 files changed, 30 insertions(+)
 create mode 100755 src/validators/ipv6-exclude
 create mode 100755 src/validators/ipv6-range
 create mode 100755 src/validators/ipv6-range-exclude

(limited to 'src/validators')

diff --git a/src/validators/ipv6-exclude b/src/validators/ipv6-exclude
new file mode 100755
index 000000000..893eeab09
--- /dev/null
+++ b/src/validators/ipv6-exclude
@@ -0,0 +1,7 @@
+#!/bin/sh
+arg="$1"
+if [ "${arg:0:1}" != "!" ]; then
+  exit 1
+fi
+path=$(dirname "$0")
+${path}/ipv6 "${arg:1}"
diff --git a/src/validators/ipv6-range b/src/validators/ipv6-range
new file mode 100755
index 000000000..033b6461b
--- /dev/null
+++ b/src/validators/ipv6-range
@@ -0,0 +1,16 @@
+#!/usr/bin/python3
+
+import sys
+import re
+from vyos.template import is_ipv6
+
+if __name__ == '__main__':
+    if len(sys.argv)>1:
+        ipv6_range = sys.argv[1]
+        # Regex for ipv6-ipv6 https://regexr.com/
+        if re.search('([a-f0-9:]+:+)+[a-f0-9]+-([a-f0-9:]+:+)+[a-f0-9]+', ipv6_range):
+            for tmp in ipv6_range.split('-'):
+                if not is_ipv6(tmp):
+                    sys.exit(1)
+
+    sys.exit(0)
diff --git a/src/validators/ipv6-range-exclude b/src/validators/ipv6-range-exclude
new file mode 100755
index 000000000..912b55ae3
--- /dev/null
+++ b/src/validators/ipv6-range-exclude
@@ -0,0 +1,7 @@
+#!/bin/sh
+arg="$1"
+if [ "${arg:0:1}" != "!" ]; then
+  exit 1
+fi
+path=$(dirname "$0")
+${path}/ipv6-range "${arg:1}"
-- 
cgit v1.2.3