nautobot-app-firewall-models icon indicating copy to clipboard operation
nautobot-app-firewall-models copied to clipboard
verified publisher icon nautobot

Modeling any any rules specific to an address family

Open Kircheneer opened this issue 3 years ago • 2 comments

Environment

  • Nautobot version: 1.4.7
  • nautobot-plugin-firewall-model version: 1.1.0

Proposed Functionality

Add a field/bit of information on the PolicyRule (and possibly NATPolicyRule) model so we can specify IPv4 vs IPv6 for rules.

Use Case

A rule for which the intent is:

All source IP addresses to all destination IP addresses on any port, but only IPv4

Kircheneer avatar Oct 26 '22 08:10 Kircheneer

For now an AddressObjectGroup named ANY-IPv4, would that work?

whitej6 avatar Nov 18 '22 12:11 whitej6

What would you think about this being another category for AddressObject objects besides range, FQDN, etc.?

Kircheneer avatar Nov 18 '22 13:11 Kircheneer