With the following configuration:
[email protected]# show policy route route pppoe-out { description "PPPoE TCPMSS clamping" enable-default-log rule 100 { protocol tcp set { tcp-mss 1448 } tcp { flags SYN } } } [email protected]# show interfaces ethernet eth1 pppoe 0 policy route pppoe-out
[email protected]# delete policy route [edit] [email protected]# commit [ policy route pppoe-out ] rm: cannot remove ‘/var/run/vyatta_policy_ref’: No such file or directory
/opt/vyatta/sbin/vyatta-firewall.pl contains lines
my $fw_stateful_file = '/var/run/vyatta_fw_stateful'; my $fw_tree_file = '/var/run/vyatta_fw_trees'; my $policy_ref_file = '/var/run/vyatta_policy_ref';
After creating policy route. And check files
[email protected]# file /var/run/vyatta_fw_stateful /var/run/vyatta_fw_stateful: cannot open `/var/run/vyatta_fw_stateful' (No such file or directory) [edit] [email protected]# file /var/run/vyatta_policy_ref /var/run/vyatta_policy_ref: cannot open `/var/run/vyatta_policy_ref' (No such file or directory) [edit] [email protected]#
$policy_ref_file figured in sub (add_route_table, remove_route_table, flush_route_table)
No file, nothing to delete
So we can use "key -f" in command rm, line 296
system("rm $refcnt_file"); <== line 296
sub write_refcnt_file {
my ($refcnt_file, @lines) = @_;
if (scalar(@lines) > 0) {
open(my $FILE, '>', $refcnt_file) or die "Error: write $!";
print $FILE join("\n", @lines), "\n";
close($FILE);
} else {
system("rm -f $refcnt_file");
}
}We need to check how safe this option is.
[email protected]# delete policy [edit] [email protected]# commit [email protected]# [edit]
PR https://github.com/vyos/vyatta-cfg-firewall/pull/18
set policy route pppoe-out rule 100 protocol 'tcp' set policy route pppoe-out rule 100 set tcp-mss '1448' set policy route pppoe-out rule 100 tcp flags 'SYN' commit [email protected]# delete policy [edit] [email protected]# commit [edit] [email protected]#