[pve-devel] [PATCH proxmox{-ve-rs, -firewall} 0/4] Fix ipfilters in proxmox-firewall

[Stefan Hanreich <s.hanreich@proxmox.com>]

This patch series addresses two issues with ipfilters:

* containers would have the wrong CIDR inserted into the auto-generated ipfilter
  ipsets
* The nomatch logic isn't working correctly, due to wrong inversion of logic,
  leading to ipfilters not working at all

Including the rustfmt patch here as well, instead of separately since we touch
some of the imports that get changed there - leading to conflicts on applying
otherwise.

proxmox-ve-rs:

Stefan Hanreich (1):
  config: guest: store network devices in BTreeMap

 proxmox-ve-config/src/guest/vm.rs | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)


proxmox-firewall:

Stefan Hanreich (3):
  run rustfmt
  ipfilter: fix wrong entries for containers
  fix #6336: fix ipfilter matching logic

 proxmox-firewall/src/config.rs                |   6 +-
 proxmox-firewall/src/firewall.rs              |  16 +-
 proxmox-firewall/src/object.rs                |   6 +-
 proxmox-firewall/src/rule.rs                  | 155 +++++--
 proxmox-firewall/tests/input/100.conf         |   1 +
 .../integration_tests__firewall.snap          | 416 ++++++++++++++++++
 6 files changed, 559 insertions(+), 41 deletions(-)


Summary over all repositories:
  7 files changed, 563 insertions(+), 45 deletions(-)

-- 
Generated by git-murpp 0.8.0

_______________________________________________
pve-devel mailing list
pve-devel@lists.proxmox.com
https://lists.proxmox.com/cgi-bin/mailman/listinfo/pve-devel