Page MenuHomeVyOS Platform

service suricata address-groups cannot be used in each other
In progress, LowPublicBUG

Description

Problem

Using suricata address-groups in other suricata address-groups fails

Logs

vyos@vyos# show service suricata address-group
+address-group external-net {
+    group !home-net
+}
 address-group home-net {
     address 192.168.1.0/24
     address 2001:8e0:3a60:b2c1::/64
     address fd1a:dcb9:501c:1201::/64
 }
[edit]
vyos@vyos# commit

Invalid address-group: Undefined referenced group "home-net"

[[service suricata]] failed
Commit failed
[edit]

Related task: https://vyos.dev/T751

Details

Difficulty level
Unknown (require assessment)
Version
VyOS 1.5-rolling-202407260020
Why the issue appeared?
Will be filled on close
Is it a breaking change?
Perfectly compatible
Issue type
Bug (incorrect behavior)

Related Objects

Event Timeline

natali-rs1985 changed the task status from Open to In progress.Aug 8 2024, 10:17 AM
natali-rs1985 changed Is it a breaking change? from Unspecified (possibly destroys the router) to Perfectly compatible.
natali-rs1985 changed Issue type from Unspecified (please specify) to Bug (incorrect behavior).
natali-rs1985 moved this task from Need Triage to In Progress on the VyOS 1.5 Circinus board.