Page MenuHomeVyOS Platform

Support for Floating Rules (Global Firewall-Rules that are automatically applied before all other Zone Rules)
Closed, ResolvedPublicFEATURE REQUEST

Description

Would be removing many duplicate rules that have to be created in multiple zones. (eg. IP- / URL-Blocklists etc.)

The system checks the floating rules first before any other of “regular rules”.

(As seen in pfSense etc.)

Example / Possible syntax:

set firewall floating rule <1-99999> destination address 1.1.1.1
set firewall floating rule <1-99999> action accept

or

set firewall name Floating-Rules floating-rule
set firewall name Floating-Rules rule 10 destination address 1.1.1.1
set firewall name Floating-Rules rule 10 action accept

EDIT: Feature added within firewall refactor (T5160)

Details

Difficulty level
Unknown (require assessment)
Version
-
Why the issue appeared?
Will be filled on close
Is it a breaking change?
Unspecified (possibly destroys the router)
Issue type
Feature (new functionality)

Related Objects