[pve-devel] [PATCH proxmox{-ve-rs, -firewall} 0/4] Fix ipfilters in proxmox-firewall
Stefan Hanreich
s.hanreich at proxmox.com
Thu Sep 25 12:05:05 CEST 2025
This patch series addresses two issues with ipfilters:
* containers would have the wrong CIDR inserted into the auto-generated ipfilter
ipsets
* The nomatch logic isn't working correctly, due to wrong inversion of logic,
leading to ipfilters not working at all
Including the rustfmt patch here as well, instead of separately since we touch
some of the imports that get changed there - leading to conflicts on applying
otherwise.
proxmox-ve-rs:
Stefan Hanreich (1):
config: guest: store network devices in BTreeMap
proxmox-ve-config/src/guest/vm.rs | 8 ++++----
1 file changed, 4 insertions(+), 4 deletions(-)
proxmox-firewall:
Stefan Hanreich (3):
run rustfmt
ipfilter: fix wrong entries for containers
fix #6336: fix ipfilter matching logic
proxmox-firewall/src/config.rs | 6 +-
proxmox-firewall/src/firewall.rs | 16 +-
proxmox-firewall/src/object.rs | 6 +-
proxmox-firewall/src/rule.rs | 155 +++++--
proxmox-firewall/tests/input/100.conf | 1 +
.../integration_tests__firewall.snap | 416 ++++++++++++++++++
6 files changed, 559 insertions(+), 41 deletions(-)
Summary over all repositories:
7 files changed, 563 insertions(+), 45 deletions(-)
--
Generated by git-murpp 0.8.0
More information about the pve-devel
mailing list