Skip to content

ruleset: drop deprecated ip6 rh0 #87

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
brada4 wants to merge 1 commit into
base: master
Choose a base branch
from
Open

ruleset: drop deprecated ip6 rh0 #87

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1 change: 1 addition & 0 deletions root/usr/share/firewall4/templates/ruleset.uc
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -363,6 +363,7 @@ table inet fw4 {

chain raw_prerouting {
type filter hook prerouting priority raw; policy accept;
rt type 0 counter drop
{% for (let zone in fw4.zones()): %}
{% if (zone.dflags["notrack"]): %}
{% for (let rule in zone.match_rules): %}
Expand Down
1 change: 1 addition & 0 deletions tests/01_configuration/01_ruleset
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -252,6 +252,7 @@ table inet fw4 {

chain raw_prerouting {
type filter hook prerouting priority raw; policy accept;
rt type 0 counter drop
}

chain raw_output {
Expand Down
1 change: 1 addition & 0 deletions tests/01_configuration/02_rule_order
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -192,6 +192,7 @@ table inet fw4 {

chain raw_prerouting {
type filter hook prerouting priority raw; policy accept;
rt type 0 counter drop
}

chain raw_output {
Expand Down
1 change: 1 addition & 0 deletions tests/02_zones/01_policies
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -222,6 +222,7 @@ table inet fw4 {

chain raw_prerouting {
type filter hook prerouting priority raw; policy accept;
rt type 0 counter drop
}

chain raw_output {
Expand Down
1 change: 1 addition & 0 deletions tests/02_zones/02_masq
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -231,6 +231,7 @@ table inet fw4 {

chain raw_prerouting {
type filter hook prerouting priority raw; policy accept;
rt type 0 counter drop
}

chain raw_output {
Expand Down
1 change: 1 addition & 0 deletions tests/02_zones/03_masq_src_dest_restrictions
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -225,6 +225,7 @@ table inet fw4 {

chain raw_prerouting {
type filter hook prerouting priority raw; policy accept;
rt type 0 counter drop
}

chain raw_output {
Expand Down
1 change: 1 addition & 0 deletions tests/02_zones/04_masq_allow_invalid
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -145,6 +145,7 @@ table inet fw4 {

chain raw_prerouting {
type filter hook prerouting priority raw; policy accept;
rt type 0 counter drop
}

chain raw_output {
Expand Down
1 change: 1 addition & 0 deletions tests/02_zones/04_wildcard_devices
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -326,6 +326,7 @@ table inet fw4 {

chain raw_prerouting {
type filter hook prerouting priority raw; policy accept;
rt type 0 counter drop
}

chain raw_output {
Expand Down
1 change: 1 addition & 0 deletions tests/02_zones/05_subnet_mask_matches
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -192,6 +192,7 @@ table inet fw4 {

chain raw_prerouting {
type filter hook prerouting priority raw; policy accept;
rt type 0 counter drop
}

chain raw_output {
Expand Down
1 change: 1 addition & 0 deletions tests/02_zones/06_family_selections
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -325,6 +325,7 @@ table inet fw4 {

chain raw_prerouting {
type filter hook prerouting priority raw; policy accept;
rt type 0 counter drop
}

chain raw_output {
Expand Down
1 change: 1 addition & 0 deletions tests/02_zones/07_helpers
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -347,6 +347,7 @@ table inet fw4 {

chain raw_prerouting {
type filter hook prerouting priority raw; policy accept;
rt type 0 counter drop
}

chain raw_output {
Expand Down
1 change: 1 addition & 0 deletions tests/02_zones/08_log_limit
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -443,6 +443,7 @@ table inet fw4 {

chain raw_prerouting {
type filter hook prerouting priority raw; policy accept;
rt type 0 counter drop
}

chain raw_output {
Expand Down
1 change: 1 addition & 0 deletions tests/03_rules/01_direction
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -121,6 +121,7 @@ table inet fw4 {

chain raw_prerouting {
type filter hook prerouting priority raw; policy accept;
rt type 0 counter drop
}

chain raw_output {
Expand Down
1 change: 1 addition & 0 deletions tests/03_rules/02_enabled
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -116,6 +116,7 @@ table inet fw4 {

chain raw_prerouting {
type filter hook prerouting priority raw; policy accept;
rt type 0 counter drop
}

chain raw_output {
Expand Down
1 change: 1 addition & 0 deletions tests/03_rules/03_constraints
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -176,6 +176,7 @@ table inet fw4 {

chain raw_prerouting {
type filter hook prerouting priority raw; policy accept;
rt type 0 counter drop
}

chain raw_output {
Expand Down
1 change: 1 addition & 0 deletions tests/03_rules/04_icmp
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -128,6 +128,7 @@ table inet fw4 {

chain raw_prerouting {
type filter hook prerouting priority raw; policy accept;
rt type 0 counter drop
}

chain raw_output {
Expand Down
1 change: 1 addition & 0 deletions tests/03_rules/05_mangle
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -278,6 +278,7 @@ table inet fw4 {

chain raw_prerouting {
type filter hook prerouting priority raw; policy accept;
rt type 0 counter drop
}

chain raw_output {
Expand Down
1 change: 1 addition & 0 deletions tests/03_rules/06_subnet_mask_matches
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -295,6 +295,7 @@ table inet fw4 {

chain raw_prerouting {
type filter hook prerouting priority raw; policy accept;
rt type 0 counter drop
}

chain raw_output {
Expand Down
1 change: 1 addition & 0 deletions tests/03_rules/07_redirect
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -332,6 +332,7 @@ table inet fw4 {

chain raw_prerouting {
type filter hook prerouting priority raw; policy accept;
rt type 0 counter drop
}

chain raw_output {
Expand Down
1 change: 1 addition & 0 deletions tests/03_rules/08_family_inheritance
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -286,6 +286,7 @@ table inet fw4 {

chain raw_prerouting {
type filter hook prerouting priority raw; policy accept;
rt type 0 counter drop
}

chain raw_output {
Expand Down
1 change: 1 addition & 0 deletions tests/03_rules/09_time
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -197,6 +197,7 @@ table inet fw4 {

chain raw_prerouting {
type filter hook prerouting priority raw; policy accept;
rt type 0 counter drop
}

chain raw_output {
Expand Down
1 change: 1 addition & 0 deletions tests/03_rules/10_notrack
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -223,6 +223,7 @@ table inet fw4 {

chain raw_prerouting {
type filter hook prerouting priority raw; policy accept;
rt type 0 counter drop
iifname "eth0" jump notrack_zone1 comment "!fw4: Handle zone1 IPv4/IPv6 notrack traffic"
}

Expand Down
1 change: 1 addition & 0 deletions tests/03_rules/11_log
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -198,6 +198,7 @@ table inet fw4 {

chain raw_prerouting {
type filter hook prerouting priority raw; policy accept;
rt type 0 counter drop
}

chain raw_output {
Expand Down
1 change: 1 addition & 0 deletions tests/03_rules/12_mark
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -144,6 +144,7 @@ table inet fw4 {

chain raw_prerouting {
type filter hook prerouting priority raw; policy accept;
rt type 0 counter drop
}

chain raw_output {
Expand Down
1 change: 1 addition & 0 deletions tests/04_forwardings/01_family_selections
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -217,6 +217,7 @@ table inet fw4 {

chain raw_prerouting {
type filter hook prerouting priority raw; policy accept;
rt type 0 counter drop
}

chain raw_output {
Expand Down
1 change: 1 addition & 0 deletions tests/05_ipsets/01_declaration
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -134,6 +134,7 @@ table inet fw4 {

chain raw_prerouting {
type filter hook prerouting priority raw; policy accept;
rt type 0 counter drop
}

chain raw_output {
Expand Down
1 change: 1 addition & 0 deletions tests/05_ipsets/02_usage
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -214,6 +214,7 @@ table inet fw4 {

chain raw_prerouting {
type filter hook prerouting priority raw; policy accept;
rt type 0 counter drop
}

chain raw_output {
Expand Down
1 change: 1 addition & 0 deletions tests/06_includes/01_nft_includes
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -227,6 +227,7 @@ table inet fw4 {

chain raw_prerouting {
type filter hook prerouting priority raw; policy accept;
rt type 0 counter drop
}

chain raw_output {
Expand Down
1 change: 1 addition & 0 deletions tests/06_includes/02_firewall.user_include
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -162,6 +162,7 @@ table inet fw4 {

chain raw_prerouting {
type filter hook prerouting priority raw; policy accept;
rt type 0 counter drop
}

chain raw_output {
Expand Down
1 change: 1 addition & 0 deletions tests/06_includes/04_disabled_include
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -168,6 +168,7 @@ table inet fw4 {

chain raw_prerouting {
type filter hook prerouting priority raw; policy accept;
rt type 0 counter drop
}

chain raw_output {
Expand Down
1 change: 1 addition & 0 deletions tests/06_includes/05_automatic_includes
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -168,6 +168,7 @@ table inet fw4 {

chain raw_prerouting {
type filter hook prerouting priority raw; policy accept;
rt type 0 counter drop
}

chain raw_output {
Expand Down