From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: <pve-devel-bounces@lists.proxmox.com> Received: from firstgate.proxmox.com (firstgate.proxmox.com [212.224.123.68]) by lore.proxmox.com (Postfix) with ESMTPS id D27061FF16F for <inbox@lore.proxmox.com>; Fri, 15 Nov 2024 13:11:10 +0100 (CET) Received: from firstgate.proxmox.com (localhost [127.0.0.1]) by firstgate.proxmox.com (Proxmox) with ESMTP id 9D3951245D; Fri, 15 Nov 2024 13:11:13 +0100 (CET) From: Stefan Hanreich <s.hanreich@proxmox.com> To: pve-devel@lists.proxmox.com Date: Fri, 15 Nov 2024 13:10:53 +0100 Message-Id: <20241115121109.170200-3-s.hanreich@proxmox.com> X-Mailer: git-send-email 2.39.5 In-Reply-To: <20241115121109.170200-1-s.hanreich@proxmox.com> References: <20241115121109.170200-1-s.hanreich@proxmox.com> MIME-Version: 1.0 X-SPAM-LEVEL: Spam detection results: 0 AWL -0.237 Adjusted score from AWL reputation of From: address BAYES_00 -1.9 Bayes spam probability is 0 to 1% DMARC_MISSING 0.1 Missing DMARC policy KAM_DMARC_STATUS 0.01 Test Rule for DKIM or SPF Failure with Strict Alignment KAM_LAZY_DOMAIN_SECURITY 1 Sending domain does not have any anti-forgery methods RDNS_NONE 0.793 Delivered to internal network by a host with no rDNS SPF_HELO_NONE 0.001 SPF: HELO does not publish an SPF Record SPF_NONE 0.001 SPF: sender does not publish an SPF Record Subject: [pve-devel] [PATCH proxmox-ve-rs v4 02/18] firewall: add bridge firewall config parser X-BeenThere: pve-devel@lists.proxmox.com X-Mailman-Version: 2.1.29 Precedence: list List-Id: Proxmox VE development discussion <pve-devel.lists.proxmox.com> List-Unsubscribe: <https://lists.proxmox.com/cgi-bin/mailman/options/pve-devel>, <mailto:pve-devel-request@lists.proxmox.com?subject=unsubscribe> List-Archive: <http://lists.proxmox.com/pipermail/pve-devel/> List-Post: <mailto:pve-devel@lists.proxmox.com> List-Help: <mailto:pve-devel-request@lists.proxmox.com?subject=help> List-Subscribe: <https://lists.proxmox.com/cgi-bin/mailman/listinfo/pve-devel>, <mailto:pve-devel-request@lists.proxmox.com?subject=subscribe> Reply-To: Proxmox VE development discussion <pve-devel@lists.proxmox.com> Cc: Wolfgang Bumiller <w.bumiller@proxmox.com> Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Errors-To: pve-devel-bounces@lists.proxmox.com Sender: "pve-devel" <pve-devel-bounces@lists.proxmox.com> V2UgaW50cm9kdWNlIGEgbmV3IHR5cGUgb2YgZmlyZXdhbGwgY29uZmlnIGZpbGUgdGhhdCBjYW4g YmUgdXNlZCBmb3IKZGVmaW5pbmcgcnVsZXMgb24gYnJpZGdlLWxldmVsLCBzaW1pbGFyIHRvIHRo ZSBleGlzdGluZwpjbHVzdGVyL2hvc3Qvdm0gY29uZmlndXJhdGlvbiBmaWxlcy4KClNpZ25lZC1v ZmYtYnk6IFN0ZWZhbiBIYW5yZWljaCA8cy5oYW5yZWljaEBwcm94bW94LmNvbT4KUmV2aWV3ZWQt Ynk6IFdvbGZnYW5nIEJ1bWlsbGVyIDx3LmJ1bWlsbGVyQHByb3htb3guY29tPgpUZXN0ZWQtYnk6 IEhhbm5lcyBEw7xyciA8aC5kdWVyckBwcm94bW94LmNvbT4KLS0tCiBwcm94bW94LXZlLWNvbmZp Zy9zcmMvZmlyZXdhbGwvYnJpZGdlLnJzIHwgNjQgKysrKysrKysrKysrKysrKysrKysrKysrCiAx IGZpbGUgY2hhbmdlZCwgNjQgaW5zZXJ0aW9ucygrKQogY3JlYXRlIG1vZGUgMTAwNjQ0IHByb3ht b3gtdmUtY29uZmlnL3NyYy9maXJld2FsbC9icmlkZ2UucnMKCmRpZmYgLS1naXQgYS9wcm94bW94 LXZlLWNvbmZpZy9zcmMvZmlyZXdhbGwvYnJpZGdlLnJzIGIvcHJveG1veC12ZS1jb25maWcvc3Jj L2ZpcmV3YWxsL2JyaWRnZS5ycwpuZXcgZmlsZSBtb2RlIDEwMDY0NAppbmRleCAwMDAwMDAwLi40 YWNiNmZhCi0tLSAvZGV2L251bGwKKysrIGIvcHJveG1veC12ZS1jb25maWcvc3JjL2ZpcmV3YWxs L2JyaWRnZS5ycwpAQCAtMCwwICsxLDY0IEBACit1c2Ugc3RkOjppbzsKKwordXNlIGFueWhvdzo6 RXJyb3I7Cit1c2Ugc2VyZGU6OkRlc2VyaWFsaXplOworCit1c2UgY3JhdGU6OmZpcmV3YWxsOjpw YXJzZTo6c2VyZGVfb3B0aW9uX2Jvb2w7Cit1c2UgY3JhdGU6OmZpcmV3YWxsOjp0eXBlczo6bG9n OjpMb2dMZXZlbDsKK3VzZSBjcmF0ZTo6ZmlyZXdhbGw6OnR5cGVzOjpydWxlOjp7RGlyZWN0aW9u LCBWZXJkaWN0fTsKKwordXNlIHN1cGVyOjpjb21tb246OlBhcnNlckNvbmZpZzsKK3VzZSBzdXBl cjo6dHlwZXM6OlJ1bGU7CisKK3B1YiBzdHJ1Y3QgQ29uZmlnIHsKKyAgICBwdWIoY3JhdGUpIGNv bmZpZzogc3VwZXI6OmNvbW1vbjo6Q29uZmlnPE9wdGlvbnM+LAorfQorCisvLy8gZGVmYXVsdCBy ZXR1cm4gdmFsdWUgZm9yIFtgQ29uZmlnOjplbmFibGVkKClgXQorcHViIGNvbnN0IEJSSURHRV9F TkFCTEVEX0RFRkFVTFQ6IGJvb2wgPSBmYWxzZTsKKy8vLyBkZWZhdWx0IHJldHVybiB2YWx1ZSBm b3IgW2BDb25maWc6OnBvbGljeV9mb3J3YXJkKClgXQorcHViIGNvbnN0IEJSSURHRV9QT0xJQ1lf Rk9SV0FSRDogVmVyZGljdCA9IFZlcmRpY3Q6OkFjY2VwdDsKKworaW1wbCBDb25maWcgeworICAg IHB1YiBmbiBwYXJzZTxSOiBpbzo6QnVmUmVhZD4oaW5wdXQ6IFIpIC0+IFJlc3VsdDxTZWxmLCBF cnJvcj4geworICAgICAgICBsZXQgcGFyc2VyX2NvbmZpZyA9IFBhcnNlckNvbmZpZyB7CisgICAg ICAgICAgICBndWVzdF9pZmFjZV9uYW1lczogZmFsc2UsCisgICAgICAgICAgICBpcHNldF9zY29w ZTogTm9uZSwKKyAgICAgICAgICAgIGFsbG93ZWRfZGlyZWN0aW9uczogdmVjIVtEaXJlY3Rpb246 OkZvcndhcmRdLAorICAgICAgICB9OworCisgICAgICAgIE9rKFNlbGYgeworICAgICAgICAgICAg Y29uZmlnOiBzdXBlcjo6Y29tbW9uOjpDb25maWc6OnBhcnNlKGlucHV0LCAmcGFyc2VyX2NvbmZp Zyk/LAorICAgICAgICB9KQorICAgIH0KKworICAgIHB1YiBmbiBlbmFibGVkKCZzZWxmKSAtPiBi b29sIHsKKyAgICAgICAgc2VsZi5jb25maWcub3B0aW9ucy5lbmFibGUudW53cmFwX29yKEJSSURH RV9FTkFCTEVEX0RFRkFVTFQpCisgICAgfQorCisgICAgcHViIGZuIHJ1bGVzKCZzZWxmKSAtPiBp bXBsIEl0ZXJhdG9yPEl0ZW0gPSAmUnVsZT4gKyAnXyB7CisgICAgICAgIHNlbGYuY29uZmlnLnJ1 bGVzLml0ZXIoKQorICAgIH0KKworICAgIHB1YiBmbiBsb2dfbGV2ZWxfZm9yd2FyZCgmc2VsZikg LT4gTG9nTGV2ZWwgeworICAgICAgICBzZWxmLmNvbmZpZy5vcHRpb25zLmxvZ19sZXZlbF9mb3J3 YXJkLnVud3JhcF9vcl9kZWZhdWx0KCkKKyAgICB9CisKKyAgICBwdWIgZm4gcG9saWN5X2Zvcndh cmQoJnNlbGYpIC0+IFZlcmRpY3QgeworICAgICAgICBzZWxmLmNvbmZpZworICAgICAgICAgICAg Lm9wdGlvbnMKKyAgICAgICAgICAgIC5wb2xpY3lfZm9yd2FyZAorICAgICAgICAgICAgLnVud3Jh cF9vcihCUklER0VfUE9MSUNZX0ZPUldBUkQpCisgICAgfQorfQorCisjW2Rlcml2ZShEZWJ1Zywg RGVmYXVsdCwgRGVzZXJpYWxpemUpXQorI1tjZmdfYXR0cih0ZXN0LCBkZXJpdmUoRXEsIFBhcnRp YWxFcSkpXQorcHViIHN0cnVjdCBPcHRpb25zIHsKKyAgICAjW3NlcmRlKGRlZmF1bHQsIHdpdGgg PSAic2VyZGVfb3B0aW9uX2Jvb2wiKV0KKyAgICBlbmFibGU6IE9wdGlvbjxib29sPiwKKworICAg IHBvbGljeV9mb3J3YXJkOiBPcHRpb248VmVyZGljdD4sCisKKyAgICBsb2dfbGV2ZWxfZm9yd2Fy ZDogT3B0aW9uPExvZ0xldmVsPiwKK30KLS0gCjIuMzkuNQoKCl9fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fCnB2ZS1kZXZlbCBtYWlsaW5nIGxpc3QKcHZlLWRl dmVsQGxpc3RzLnByb3htb3guY29tCmh0dHBzOi8vbGlzdHMucHJveG1veC5jb20vY2dpLWJpbi9t YWlsbWFuL2xpc3RpbmZvL3B2ZS1kZXZlbAo=