Page MenuHomeVyOS Platform

IPv6 Firewall configuration error: Cannot delete rule set "GUEST-WAN-6" (still in use)
Not ApplicablePublicBUG

Description

Firewall configuration error: Cannot delete rule set "GUEST-WAN-6" (still in use)

This happens when adding/removing the enable-default-log node for any given Firewall rule

Workaround:

  • remove firewall rule from zone
  • commit changed rule
  • readd rule to firewall zone

Details

Version
1.3-rolling-202005221529
Is it a breaking change?
Unspecified (possibly destroys the router)
Issue type
Bug (incorrect behavior)

Event Timeline

erkin set Issue type to Bug (incorrect behavior).Aug 30 2021, 6:02 AM
erkin removed a subscriber: Global Notifications.
dmbaturin subscribed.

No longer reproducible. With this configuration I can delete the option and the firewall itself:

vyos@vyos# show firewall 
 global-options {
     source-validation loose
 }
 ipv4 {
     name Foo {
         default-log
         rule 10 {
             action accept
         }
     }
 }
 zone LAN {
     from WAN {
         firewall {
             name Foo
         }
     }
     interface eth0
 }
 zone WAN {
     interface eth1
 }