T6646: conntrack: in ignore rules, if protocols=all, do not append it to the rule (backport #3981)

[mergify]

Change Summary

in ignore rules, if protocols=all, do not append it to the rule

Types of changes

• Bug fix (non-breaking change which fixes an issue)
• New feature (non-breaking change which adds functionality)
• Code style update (formatting, renaming)
• Refactoring (no functional changes)
• Migration from an old Vyatta component to vyos-1x, please link to related PR inside obsoleted component
• Other (please describe):

Related Task(s)

• https://vyos.dev/T6646

Related PR(s)

Component(s) name

system conntrack

Proposed changes

How to test

vyos@upgr-test:~$ show config comm | grep ignore
set system conntrack ignore ipv4 rule 1 inbound-interface 'eth3'
set system conntrack ignore ipv4 rule 1 protocol 'all'
vyos@upgr-test:~$ sudo nft list chain ip vyos_conntrack VYOS_CT_IGNORE
table ip vyos_conntrack {
        chain VYOS_CT_IGNORE {
                iifname "eth3" counter packets 0 bytes 0 notrack comment "ignore-1"
                return
        }
}
vyos@upgr-test:~$ 

Smoketest result

test_system_conntrack.py --> OK

Checklist:

• I have read the CONTRIBUTING document
• I have linked this PR to one or more Phabricator Task(s)
• I have run the components SMOKETESTS if applicable
• My commit headlines contain a valid Task id
• My change requires a change to the documentation
• I have updated the documentation accordingly

---

This is an automatic backport of pull request #3981 done by [Mergify](https://mergify.com).

[github-actions]

👍
No issues in PR Title / Commit Title