Page MenuHomeVyOS Platform

service suricata address-groups cannot be used in each other
Closed, ResolvedPublicBUG

Description

Problem

Using suricata address-groups in other suricata address-groups fails

Logs

vyos@vyos# show service suricata address-group
+address-group external-net {
+    group !home-net
+}
 address-group home-net {
     address 192.168.1.0/24
     address 2001:8e0:3a60:b2c1::/64
     address fd1a:dcb9:501c:1201::/64
 }
[edit]
vyos@vyos# commit

Invalid address-group: Undefined referenced group "home-net"

[[service suricata]] failed
Commit failed
[edit]

Related task: https://vyos.dev/T751

Details

Version
VyOS 1.5-rolling-202407260020
Is it a breaking change?
Perfectly compatible
Issue type
Bug (incorrect behavior)

Event Timeline

natali-rs1985 changed the task status from Open to In progress.Aug 8 2024, 10:17 AM
natali-rs1985 changed Is it a breaking change? from Unspecified (possibly destroys the router) to Perfectly compatible.
natali-rs1985 changed Issue type from Unspecified (please specify) to Bug (incorrect behavior).
natali-rs1985 moved this task from Open to In Progress on the VyOS 1.5 Circinus board.
Viacheslav moved this task from Backport Candidates to Completed on the VyOS Rolling board.
Viacheslav subscribed.

We use suricata only for the rolling
backport not required