kunsi/bundlewrap
1
0
Fork 0
Code Issues 1 Pull requests 2 Releases Activity

libs.tools.resolve_identifier(): add option to filter out linklocal ips and only physical interfaces

Browse source
This commit is contained in:
Franzi 2023-09-09 15:37:37 +02:00
parent 6539923644
commit 2b51812118
Signed by: kunsi
GPG key ID: 12E3D2136B818350
3 changed files with 19 additions and 27 deletions
Download patch file Download diff file Expand all files Collapse all files

2
bundles/nftables/metadata.py
View file

@ -78,7 +78,7 @@ def port_rules_to_nftables(metadata):
if target in ('*', 'ipv4', 'ipv6'):
ruleset.add(f'inet filter input {version_str} {port_str} accept {comment}')
else:
resolved = repo.libs.tools.resolve_identifier(repo, target)
resolved = repo.libs.tools.resolve_identifier(repo, target, linklocal=True)
for address in resolved['ipv4']:
ruleset.add(f'inet filter input meta nfproto ipv4 {port_str} ip saddr {address} accept {comment}')