Page MenuHomeVyOS Platform

firewall: fqdn in prerouting raw rules references an undeclared nft set
In progress, HighPublicBUG

Description

fqdn in prerouting raw rules references an FQDN set that is never declared.

Location
python/vyos/firewall.py:62, :64, :227-230

interface-definitions/include/firewall/common-rule-ipv4-raw.xml.i:28, :48

Problem
fqdn_config_parse registers sets only for forward/input/output/name; parse_rule emits @FQDN_prerouting_....

Impact
Commit fails for any prerouting raw rule with fqdn; domain-resolver likewise.

Details

Version
rolling
Is it a breaking change?
Perfectly compatible
Issue type
Bug (incorrect behavior)