Merge pull request #3578 from nicolas-fort/raw-hook
85da43aa2647
Actions

Description

Merge pull request #3578 from nicolas-fort/raw-hook

T3900: Add support for raw tables in firewall

Details

Provenance

dmbaturin	Authored on Jun 6 2024, 3:19 PM
GitHub	Committed on Jun 6 2024, 3:19 PM

Parents

rVYOSONEX1c57ed83b783: Merge pull request #3573 from talmakion/bugfix/T6401-2
rVYOSONEX770edf016838: T3900: T6394: extend functionalities in firewall; move netfilter sysctl timeout…

Branches

Tags

Event Timeline

GitHub <noreply@github.com> committed rVYOSONEX85da43aa2647: Merge pull request #3578 from nicolas-fort/raw-hook (authored by dmbaturin).Jun 6 2024, 3:19 PM

Merged Changes

770edf016838 T3900: T6394: extend functionalities in firewall; move netfilter sysctl timeout…
Author
n.fort
Browse Repository
No Builds
No Audits
6871c5541c19 T3900: add support for raw table in firewall.
Author
n.fort
Browse Repository
No Builds
No Audits

Changes (37)

Path

Size

data/

templates/

conntrack/

sysctl.conf.j2

firewall/

nftables.j2

sysctl-firewall.conf.j2

interface-definitions/

firewall.xml.in

include/

conntrack/

timeout-common-protocols.xml.i

firewall/

action-and-notrack.xml.i

add-addr-to-group-ipv4.xml.i

add-addr-to-group-ipv6.xml.i

common-rule-inet.xml.i

common-rule-ipv4-raw.xml.i

common-rule-ipv4.xml.i

common-rule-ipv6-raw.xml.i

common-rule-ipv6.xml.i

connection-status.xml.i

fragment.xml.i

global-options.xml.i

icmpv6.xml.i

ipv4-hook-output.xml.i

ipv4-hook-prerouting.xml.i

ipv6-hook-output.xml.i

ipv6-hook-prerouting.xml.i

limit.xml.i

recent.xml.i

time.xml.i

	firewall/
	policy/

	icmp.xml.i
	route-ipv4.xml.i

	firewall/
	nat/

protocol.xml.i

	firewall/
	conntrack/

timeout-common-protocols.xml.i

policy/

route-common.xml.i

route-ipv4.xml.i

version/

firewall-version.xml.i

system_conntrack.xml.in

python/

vyos/

firewall.py

smoketest/

scripts/

cli/

test_firewall.py

test_system_conntrack.py

src/

conf_mode/

firewall.py

system_conntrack.py

	migration-scripts/	firewall/
	migration-scripts/	snmp/

	15-to-16
	2-to-3

rVYOSONEX85da43aa2647

View Options

data/templates/conntrack/sysctl.conf.j2

View Options

data/templates/firewall/nftables.j2

View Options

data/templates/firewall/sysctl-firewall.conf.j2

View Options

interface-definitions/firewall.xml.in

View Options

interface-definitions/include/conntrack/timeout-common-protocols.xml.i

View Options

interface-definitions/include/firewall/action-and-notrack.xml.i

View Options

interface-definitions/include/firewall/add-addr-to-group-ipv4.xml.i

View Options

interface-definitions/include/firewall/add-addr-to-group-ipv6.xml.i

View Options

interface-definitions/include/firewall/common-rule-inet.xml.i

View Options

interface-definitions/include/firewall/common-rule-ipv4-raw.xml.i

View Options

interface-definitions/include/firewall/common-rule-ipv4.xml.i

View Options

interface-definitions/include/firewall/common-rule-ipv6-raw.xml.i

View Options

interface-definitions/include/firewall/common-rule-ipv6.xml.i

View Options

interface-definitions/include/firewall/connection-status.xml.i

View Options

interface-definitions/include/firewall/fragment.xml.i

View Options

interface-definitions/include/firewall/global-options.xml.i

View Options

interface-definitions/include/firewall/icmp.xml.i

View Options

interface-definitions/include/firewall/icmpv6.xml.i

View Options

interface-definitions/include/firewall/ipv4-hook-output.xml.i

View Options

interface-definitions/include/firewall/ipv4-hook-prerouting.xml.i

View Options

interface-definitions/include/firewall/ipv6-hook-output.xml.i

View Options

interface-definitions/include/firewall/ipv6-hook-prerouting.xml.i

View Options

interface-definitions/include/firewall/limit.xml.i

View Options

interface-definitions/include/firewall/protocol.xml.i

View Options

interface-definitions/include/firewall/recent.xml.i

View Options

interface-definitions/include/firewall/time.xml.i

View Options

interface-definitions/include/firewall/timeout-common-protocols.xml.i

View Options

interface-definitions/include/policy/route-common.xml.i

View Options

interface-definitions/include/policy/route-ipv4.xml.i

View Options

interface-definitions/include/version/firewall-version.xml.i

View Options

interface-definitions/system_conntrack.xml.in

View Options

python/vyos/firewall.py

View Options

smoketest/scripts/cli/test_firewall.py

View Options

smoketest/scripts/cli/test_system_conntrack.py

View Options

src/conf_mode/firewall.py

View Options

src/conf_mode/system_conntrack.py

View Options

src/migration-scripts/firewall/15-to-16

Merge pull request #3578 from nicolas-fort/raw-hook85da43aa2647Actions

Description

Details

Event Timeline

Merged Changes

Changes (37)

rVYOSONEX85da43aa2647

data/templates/conntrack/sysctl.conf.j2

data/templates/firewall/nftables.j2

data/templates/firewall/sysctl-firewall.conf.j2

interface-definitions/firewall.xml.in

interface-definitions/include/conntrack/timeout-common-protocols.xml.i

interface-definitions/include/firewall/action-and-notrack.xml.i

interface-definitions/include/firewall/add-addr-to-group-ipv4.xml.i

interface-definitions/include/firewall/add-addr-to-group-ipv6.xml.i

interface-definitions/include/firewall/common-rule-inet.xml.i

interface-definitions/include/firewall/common-rule-ipv4-raw.xml.i

interface-definitions/include/firewall/common-rule-ipv4.xml.i

interface-definitions/include/firewall/common-rule-ipv6-raw.xml.i

interface-definitions/include/firewall/common-rule-ipv6.xml.i

interface-definitions/include/firewall/connection-status.xml.i

interface-definitions/include/firewall/fragment.xml.i

interface-definitions/include/firewall/global-options.xml.i

interface-definitions/include/firewall/icmp.xml.i

interface-definitions/include/firewall/icmpv6.xml.i

interface-definitions/include/firewall/ipv4-hook-output.xml.i

interface-definitions/include/firewall/ipv4-hook-prerouting.xml.i

interface-definitions/include/firewall/ipv6-hook-output.xml.i

interface-definitions/include/firewall/ipv6-hook-prerouting.xml.i

interface-definitions/include/firewall/limit.xml.i

interface-definitions/include/firewall/protocol.xml.i

interface-definitions/include/firewall/recent.xml.i

interface-definitions/include/firewall/time.xml.i

interface-definitions/include/firewall/timeout-common-protocols.xml.i

interface-definitions/include/policy/route-common.xml.i

interface-definitions/include/policy/route-ipv4.xml.i

interface-definitions/include/version/firewall-version.xml.i

interface-definitions/system_conntrack.xml.in

python/vyos/firewall.py

smoketest/scripts/cli/test_firewall.py

smoketest/scripts/cli/test_system_conntrack.py

src/conf_mode/firewall.py

src/conf_mode/system_conntrack.py

src/migration-scripts/firewall/15-to-16

Merge pull request #3578 from nicolas-fort/raw-hook
85da43aa2647
Actions