Page MenuHomeVyOS Platform
Create Task
Maniphest T3568

Add XML for firewall conf-mode
Closed, ResolvedPublicFEATURE REQUEST
Actions

Description

Add XML for firewall configuration mode.

Details

Difficulty level
Hard (possibly days)
Version
-
Why the issue appeared?
Will be filled on close
Is it a breaking change?
Perfectly compatible
Issue type
Unspecified (please specify)

Related Objects
Search...

StatusSubtypeAssignedTask
 ResolvedsarthurdevT2199 Rewrite firewall in new XML/Python style
 ResolvedFEATURE REQUESTViacheslavT3568 Add XML for firewall conf-mode

Event Timeline

Viacheslav created this task.May 21 2021, 2:24 PM
Viacheslav added a parent task: T2199: Rewrite firewall in new XML/Python style.
Viacheslav claimed this task.May 21 2021, 2:26 PM
Viacheslav triaged this task as Normal priority.
Viacheslav changed Difficulty level from Unknown (require assessment) to Hard (possibly days).
Viacheslav updated the task description. (Show Details)May 21 2021, 2:29 PM
pasik added a subscriber: pasik.May 21 2021, 8:15 PM
Viacheslav added a comment.May 24 2021, 12:06 PM

PR https://github.com/vyos/vyos-1x/pull/854
Add XML for the firewall. For future rewriting to Python style.

set nfirewall all-ping 'enable'
set nfirewall group address-group ADDR address '10.0.0.1-10.0.0.5'
set nfirewall group address-group ADDR address '192.0.2.1'
set nfirewall name FOO default-action 'drop'
set nfirewall name FOO rule 10 action 'permit'
set nfirewall name FOO rule 10 destination address '192.0.2.1'
set nfirewall name FOO rule 10 destination port '22'
set nfirewall state-policy established log enable

Commit

vyos@r6-roll# commit
[ nfirewall ]
{'all_ping': 'enable',
 'group': {'address_group': {'ADDR': {'address': ['10.0.0.1-10.0.0.5',
                                                  '192.0.2.1']}}},
 'name': {'FOO': {'default_action': 'drop',
                  'rule': {'10': {'action': 'permit',
                                  'destination': {'address': '192.0.2.1',
                                                  'port': '22'}}}}},
 'state_policy': {'established': {'log': {'enable': {}}}}}

[edit]
vyos@r6-roll#
Viacheslav changed the task status from Open to Needs testing.May 25 2021, 8:20 PM
c-po moved this task from Need Triage to In Progress on the VyOS 1.4 Sagitta board.Jun 13 2021, 3:22 PM
c-po closed this task as Resolved.Aug 27 2021, 5:16 PM
c-po set Issue type to Unspecified (please specify).
c-po moved this task from In Progress to Finished on the VyOS 1.4 Sagitta board.Sep 19 2021, 7:05 AM