Description

Add XML for firewall configuration mode.

Details

Version: -
Is it a breaking change?: Perfectly compatible
Issue type: Unspecified (please specify)

Related Objects
Search...

		Status	Subtype	Assigned	Task
		Resolved		sarthurdev	T2199 Rewrite firewall in new XML/Python style
		Resolved	FEATURE REQUEST	Viacheslav	T3568 Add XML for firewall conf-mode

Event Timeline

Viacheslav created this task.May 21 2021, 2:24 PM

Viacheslav added a parent task: T2199: Rewrite firewall in new XML/Python style.

Viacheslav claimed this task.May 21 2021, 2:26 PM

Viacheslav triaged this task as Normal priority.

Viacheslav edited a custom field.

Viacheslav updated the task description. (Show Details)May 21 2021, 2:29 PM

pasik subscribed.May 21 2021, 8:15 PM

PR https://github.com/vyos/vyos-1x/pull/854
Add XML for the firewall. For future rewriting to Python style.

set nfirewall all-ping 'enable'
set nfirewall group address-group ADDR address '10.0.0.1-10.0.0.5'
set nfirewall group address-group ADDR address '192.0.2.1'
set nfirewall name FOO default-action 'drop'
set nfirewall name FOO rule 10 action 'permit'
set nfirewall name FOO rule 10 destination address '192.0.2.1'
set nfirewall name FOO rule 10 destination port '22'
set nfirewall state-policy established log enable

Commit

vyos@r6-roll# commit
[ nfirewall ]
{'all_ping': 'enable',
 'group': {'address_group': {'ADDR': {'address': ['10.0.0.1-10.0.0.5',
                                                  '192.0.2.1']}}},
 'name': {'FOO': {'default_action': 'drop',
                  'rule': {'10': {'action': 'permit',
                                  'destination': {'address': '192.0.2.1',
                                                  'port': '22'}}}}},
 'state_policy': {'established': {'log': {'enable': {}}}}}

[edit]
vyos@r6-roll#

Restricted Repository Identity mentioned this in rVYOSONEX654c8cad2daa: firewall: T3568: add XML definitions for firewall.May 25 2021, 8:17 PM

Viacheslav changed the task status from Open to Needs testing.May 25 2021, 8:20 PM

c-po moved this task from Open to In Progress on the VyOS 1.4 Sagitta board.Jun 13 2021, 3:22 PM

c-po closed this task as Resolved.Aug 27 2021, 5:16 PM

c-po set Issue type to Unspecified (please specify).

c-po moved this task from In Progress to Finished on the VyOS 1.4 Sagitta board.Sep 19 2021, 7:05 AM

c-po mentioned this in rVYOSONEX74994f9b1058: firewall: T3568: rename XML building blocks to match CLI node name.Aug 30 2022, 3:38 PM

c-po mentioned this in rVYOSONEX7d5b11508cf8: firewall: T3568: cleanup XML help node - remove information passed via valueHelp.

c-po mentioned this in rVYOSONEX4d5095fdddb2: firewall: T3568: add XML include block for eq,gt,lt options.Sep 3 2022, 6:42 PM

c-po mentioned this in rVYOSONEX2791fd446e54: firewall: T3568: improve default-action help string.

c-po mentioned this in rVYOSONEX5a6c8b52e985: Merge branch 'firewall' into current.