infix

mirror of https://github.com/kernelkit/infix.git synced 2026-07-30 04:33:00 +02:00

Files

T

Joachim Wiberg 5e180abae4 Fix firewall not updating when interfaces become bridge/LAG ports

When interfaces were moved from firewall zones to become bridge or LAG
ports (e.g., sfp1/sfp2 moved from WAN zone to lan-br), the firewall
configuration was not regenerated. This caused stale entries in
/etc/firewalld/zones/*.xml where interfaces remained listed in their
old zones despite no longer being L3 interfaces.

Root cause: firewall_change() only triggered on firewall model changes,
but interface membership changes (bridge-port/lag-port) occur in the
ietf-interfaces model. When interfaces become member ports, they
transition from L3 to L2, which affects the result of
interfaces_get_all_l3() used for default zone assignment.

Fix: Expand the diff check to also trigger firewall regeneration when
bridge-port or lag-port configuration changes, ensuring firewall zones
stay synchronized with actual L3 interface topology.

Fixes #1345

Signed-off-by: Joachim Wiberg <troglobit@gmail.com>

2026-01-13 07:34:04 +01:00

bin

bin/support: simplify leading script comment

2025-12-18 17:01:33 +01:00

confd

Fix firewall not updating when interfaces become bridge/LAG ports

2026-01-13 07:34:04 +01:00

factory

factory: getchar() returns integer not char

2024-02-23 14:01:23 +01:00

gencert

gencert: C replacement for python+rust gencert