Page MenuHomeVyOS Platform

Ability to filter traffic originating from the router itself via firewall
Closed, ResolvedPublicFEATURE REQUEST

Description

Ability to filter traffic originating from the router itself via firewall
Something like

set firewall interface eth* local-out

Details

Difficulty level
Unknown (require assessment)
Version
-
Why the issue appeared?
Will be filled on close
Is it a breaking change?
Unspecified (possibly destroys the router)
Issue type
Feature (new functionality)

Event Timeline

I would prefer a different syntax, in order to avoid the necessity attaching it to an interface. Maybe something like:

set firewall local-out rule <number> ....

Then in matching options, you can define, or not, outbound-interface.

All rules defined here will be written filter-output chain

Viacheslav claimed this task.

It seems to work :)

set firewall ipv4 output filter rule 10 action reject 
commit