netfoundry / zfw

An EBPF based IPv4/IPv6 firewall with integrations for OpenZiti Zero-Trust Framework edge-routers and tunnellers
GNU General Public License v3.0
41 stars 3 forks source link

enhance flush functionality (-F) #58

Closed jlin-nf closed 3 months ago

jlin-nf commented 3 months ago

Before we have egress filter, the -F flushes the ingress rules. It still only flushed the ingress rules. To flush the egress rules, another optional parameter needs to be supplied: -z egress.

Please enhance this functionality to the following:

  1. -F only, will flush both ingress and egress rules.
  2. -F -z ingress, flushes ingress rules only (currently working correctly)
  3. -F -z egress, flushes egress rules only (currently working correctly).
r-caamano commented 3 months ago

The requested logic change was added in v0.8.5