nautobot / nautobot-app-firewall-models

Model Firewall policies in Nautobot

Home Page:https://docs.nautobot.com/projects/firewall-models/en/latest/

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Modeling any any rules specific to an address family

Kircheneer opened this issue · comments

Environment

  • Nautobot version: 1.4.7
  • nautobot-plugin-firewall-model version: 1.1.0

Proposed Functionality

Add a field/bit of information on the PolicyRule (and possibly NATPolicyRule) model so we can specify IPv4 vs IPv6 for rules.

Use Case

A rule for which the intent is:

All source IP addresses to all destination IP addresses on any port, but only IPv4

For now an AddressObjectGroup named ANY-IPv4, would that work?

What would you think about this being another category for AddressObject objects besides range, FQDN, etc.?