T6723: firewall: extend op-mode commands

[nicolas-fort]

Change Summary

Extend op-mode commands <show firewall ..> and a <show log firewall ..> in order to match all chains/priorities

Types of changes

• Bug fix (non-breaking change which fixes an issue)
• New feature (non-breaking change which adds functionality)
• Code style update (formatting, renaming)
• Refactoring (no functional changes)
• Migration from an old Vyatta component to vyos-1x, please link to related PR inside obsoleted component
• Other (please describe):

Related Task(s)

• https://vyos.dev/T6723

Related PR(s)

Component(s) name

firewall

Proposed changes

How to test

Ipv4 test:

vyos@bridge:~$ show firewall ipv4 prerouting raw
Ruleset Information

---------------------------------
ipv4 Firewall "prerouting raw"

Rule     Action    Protocol      Packets    Bytes  Conditions
-------  --------  ----------  ---------  -------  -------------------------------------------------------
10       accept    icmp                2      168  meta l4proto icmp  prefix "[ipv4-PRE-raw-10-A]"  accept
default  drop      all               913   297958

vyos@bridge:~$ show log firewall ipv4 prerouting raw 
Sep 18 13:52:45 kernel: [ipv4-PRE-raw-10-A]IN=eth0 OUT= MAC=50:00:00:01:00:00:4c:d5:77:c0:19:81:08:00 SRC=192.168.77.14 DST=192.168.77.24 LEN=84 TOS=0x00 PREC=0x00 TTL=64 ID=39884 DF PROTO=ICMP TYPE=8 CODE=0 ID=2 SEQ=1 
Sep 18 13:52:46 kernel: [ipv4-PRE-raw-10-A]IN=eth0 OUT= MAC=50:00:00:01:00:00:4c:d5:77:c0:19:81:08:00 SRC=192.168.77.14 DST=192.168.77.24 LEN=84 TOS=0x00 PREC=0x00 TTL=64 ID=40793 DF PROTO=ICMP TYPE=8 CODE=0 ID=2 SEQ=2 
vyos@bridge:~$ show log firewall ipv4 prerouting raw rule 
Possible completions:
  10                    Show log for a rule in the specified firewall

      
vyos@bridge:~$ show log firewall ipv4 prerouting raw rule 20
vyos@bridge:~$ show log firewall ipv4 prerouting raw rule 10
Sep 18 13:52:45 kernel: [ipv4-PRE-raw-10-A]IN=eth0 OUT= MAC=50:00:00:01:00:00:4c:d5:77:c0:19:81:08:00 SRC=192.168.77.14 DST=192.168.77.24 LEN=84 TOS=0x00 PREC=0x00 TTL=64 ID=39884 DF PROTO=ICMP TYPE=8 CODE=0 ID=
2 SEQ=1 
Sep 18 13:52:46 kernel: [ipv4-PRE-raw-10-A]IN=eth0 OUT= MAC=50:00:00:01:00:00:4c:d5:77:c0:19:81:08:00 SRC=192.168.77.14 DST=192.168.77.24 LEN=84 TOS=0x00 PREC=0x00 TTL=64 ID=40793 DF PROTO=ICMP TYPE=8 CODE=0 ID=
2 SEQ=2 
vyos@bridge:~$

And bridge test:

vyos@bridge:~$ show firewall bridge prerouting filter
Ruleset Information

---------------------------------
bridge Firewall "prerouting filter"

Rule     Action    Protocol      Packets    Bytes  Conditions
-------  --------  ----------  ---------  -------  ------------------------------------------------------------------------
10       jump      all                 3      150  iifname @I_br0-ifaces  prefix "[bri-PRE-filter-10-J]"  jump NAME_br0-pre
20       jump      all                 0        0  iifname @I_br1-ifaces  jump NAME_br1-pre
30       jump      all                 0        0  iifname @I_br2-ifaces  jump NAME_br2-pre
default  drop      all                 0        0

vyos@bridge:~$ show log firewall bridge prerouting 
Sep 18 13:53:40 kernel: [bri-PRE-filter-10-J]IN=eth1 OUT= ARP HTYPE=1 PTYPE=0x0800 OPCODE=1 MACSRC=00:50:79:66:68:02 IPSRC=10.0.0.12 MACDST=ff:ff:ff:ff:ff:ff IPDST=10.0.0.11
Sep 18 13:53:41 kernel: [bri-PRE-filter-10-J]IN=eth1 OUT= ARP HTYPE=1 PTYPE=0x0800 OPCODE=1 MACSRC=00:50:79:66:68:02 IPSRC=10.0.0.12 MACDST=ff:ff:ff:ff:ff:ff IPDST=10.0.0.11
Sep 18 13:53:42 kernel: [bri-PRE-filter-10-J]IN=eth1 OUT= ARP HTYPE=1 PTYPE=0x0800 OPCODE=1 MACSRC=00:50:79:66:68:02 IPSRC=10.0.0.12 MACDST=ff:ff:ff:ff:ff:ff IPDST=10.0.0.11
vyos@bridge:~$ show log firewall bridge prerouting filter rule 
Possible completions:
  10                    Show log for a rule in the specified firewall
  20
  30
      
vyos@bridge:~$ show log firewall bridge prerouting filter rule 20
vyos@bridge:~$ show log firewall bridge prerouting filter rule 10
Sep 18 13:53:40 kernel: [bri-PRE-filter-10-J]IN=eth1 OUT= ARP HTYPE=1 PTYPE=0x0800 OPCODE=1 MACSRC=00:50:79:66:68:02 IPSRC=10.0.0.12 MACDST=ff:ff:ff:ff:ff:ff IPDST=10.0.0.11
Sep 18 13:53:41 kernel: [bri-PRE-filter-10-J]IN=eth1 OUT= ARP HTYPE=1 PTYPE=0x0800 OPCODE=1 MACSRC=00:50:79:66:68:02 IPSRC=10.0.0.12 MACDST=ff:ff:ff:ff:ff:ff IPDST=10.0.0.11
Sep 18 13:53:42 kernel: [bri-PRE-filter-10-J]IN=eth1 OUT= ARP HTYPE=1 PTYPE=0x0800 OPCODE=1 MACSRC=00:50:79:66:68:02 IPSRC=10.0.0.12 MACDST=ff:ff:ff:ff:ff:ff IPDST=10.0.0.11
vyos@bridge:~$ 

Smoketest result

Checklist:

• I have read the CONTRIBUTING document
• I have linked this PR to one or more Phabricator Task(s)
• I have run the components SMOKETESTS if applicable
• My commit headlines contain a valid Task id
• My change requires a change to the documentation
• I have updated the documentation accordingly

[github-actions]

👍
No issues in PR Title / Commit Title

[c-po]

@nicolas-fort backport to sagitta and circinus?

[nicolas-fort]

@nicolas-fort backport to sagitta and circinus?

Neither Sagitta and Circinus had received backports for new structure under bridge firewall