From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from firstgate.proxmox.com (firstgate.proxmox.com [212.224.123.68]) by lore.proxmox.com (Postfix) with ESMTPS id 8616D1FF165 for ; Thu, 25 Sep 2025 14:21:44 +0200 (CEST) Received: from firstgate.proxmox.com (localhost [127.0.0.1]) by firstgate.proxmox.com (Proxmox) with ESMTP id E4A4C1FB57; Thu, 25 Sep 2025 14:22:15 +0200 (CEST) From: Stefan Hanreich To: pve-devel@lists.proxmox.com Date: Thu, 25 Sep 2025 14:21:37 +0200 Message-ID: <20250925122142.228719-1-s.hanreich@proxmox.com> X-Mailer: git-send-email 2.47.3 MIME-Version: 1.0 X-SPAM-LEVEL: Spam detection results: 0 AWL -0.183 Adjusted score from AWL reputation of From: address BAYES_00 -1.9 Bayes spam probability is 0 to 1% DMARC_MISSING 0.1 Missing DMARC policy KAM_DMARC_STATUS 0.01 Test Rule for DKIM or SPF Failure with Strict Alignment KAM_LAZY_DOMAIN_SECURITY 1 Sending domain does not have any anti-forgery methods RCVD_IN_VALIDITY_CERTIFIED_BLOCKED 0.001 ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. RCVD_IN_VALIDITY_RPBL_BLOCKED 0.001 ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. RCVD_IN_VALIDITY_SAFE_BLOCKED 0.001 ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. RDNS_NONE 0.793 Delivered to internal network by a host with no rDNS SPF_HELO_NONE 0.001 SPF: HELO does not publish an SPF Record SPF_NONE 0.001 SPF: sender does not publish an SPF Record Subject: [pve-devel] [PATCH proxmox{-ve-rs, -firewall} v2 0/4] Fix ipfilters in proxmox-firewall X-BeenThere: pve-devel@lists.proxmox.com X-Mailman-Version: 2.1.29 Precedence: list List-Id: Proxmox VE development discussion List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: Proxmox VE development discussion Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Errors-To: pve-devel-bounces@lists.proxmox.com Sender: "pve-devel" This patch series addresses two issues with ipfilters: * containers would have the wrong CIDR inserted into the auto-generated ipfilter ipsets * The nomatch logic isn't working correctly, due to wrong inversion of logic, leading to ipfilters not working at all Including the rustfmt patch here as well, instead of separately since we touch some of the imports that get changed there - leading to conflicts on applying otherwise. Changes from v1: * properly regenerate test-output with the proxmox-ve-rs patch applied * improve documentation of handle_set and handle_ipfilter proxmox-ve-rs: Stefan Hanreich (1): config: guest: store network devices in BTreeMap proxmox-ve-config/src/guest/vm.rs | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) proxmox-firewall: Stefan Hanreich (3): run rustfmt ipfilter: fix wrong entries for containers fix #6336: fix ipfilter matching logic proxmox-firewall/src/config.rs | 6 +- proxmox-firewall/src/firewall.rs | 16 +- proxmox-firewall/src/object.rs | 6 +- proxmox-firewall/src/rule.rs | 161 +++++-- proxmox-firewall/tests/input/100.conf | 1 + .../integration_tests__firewall.snap | 416 ++++++++++++++++++ 6 files changed, 565 insertions(+), 41 deletions(-) Summary over all repositories: 7 files changed, 569 insertions(+), 45 deletions(-) -- Generated by git-murpp 0.8.0 _______________________________________________ pve-devel mailing list pve-devel@lists.proxmox.com https://lists.proxmox.com/cgi-bin/mailman/listinfo/pve-devel