Page MenuHomeVyOS Platform

Error on firewall while using jump-target and no custom ruleset are present
Closed, ResolvedPublicBUG

Description

Steps to reproduce on clean installation:

vyos@middle# run show config comm | grep firewall
[edit]
vyos@middle# set firewall ipv4 output filter rule 10 action 'jump'
[edit]
vyos@middle# set firewall ipv4 output filter rule 10 jump-target 'FOO'
[edit]
vyos@middle# commit
[ firewall ] 
VyOS had an issue completing a command.

We are sorry that you encountered a problem while using VyOS.
There are a few things you can do to help us (and yourself):
- Contact us using the online help desk if you have a subscription:
  https://support.vyos.io/
- Make sure you are running the latest version of VyOS available at:
  https://vyos.net/get/
- Consult the community forum to see how to handle this issue:
  https://forum.vyos.io
- Join us on Slack where our users exchange help and advice:
  https://vyos.slack.com

When reporting problems, please include as much information as possible:
- do not obfuscate any data (feel free to contact us privately if your 
  business policy requires it)
- and include all the information presented below

Report time:      2024-08-02 11:46:24
Image version:    VyOS 1.5-rolling-202408010023
Release train:    current

Built by:         [email protected]
Built on:         Thu 01 Aug 2024 02:55 UTC
Build UUID:       610a9054-11ff-4c2d-a928-fa5c4d2ddf5a
Build commit ID:  fd890909411dca

Architecture:     x86_64
Boot via:         installed image
System type:      KVM guest

Hardware vendor:  Bochs
Hardware model:   Bochs
Hardware S/N:     
Hardware UUID:    4a93b56b-df1f-4cb8-9d1e-2dcbd6bd8702

Traceback (most recent call last):
  File "/usr/libexec/vyos/conf_mode/firewall.py", line 527, in <module>
    verify(c)
  File "/usr/libexec/vyos/conf_mode/firewall.py", line 398, in verify
    verify_rule(firewall, name, rule_conf, False)
  File "/usr/libexec/vyos/conf_mode/firewall.py", line 185, in verify_rule
    verify_jump_target(firewall, chain_name, target, ipv6, recursive=True)
  File "/usr/libexec/vyos/conf_mode/firewall.py", line 139, in verify_jump_target
    if target not in dict_search_args(firewall, 'ipv4', 'name'):
       ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
TypeError: argument of type 'NoneType' is not iterable



[[firewall]] failed
Commit failed
[edit]
vyos@middle#

Details

Difficulty level
Unknown (require assessment)
Version
vyos-1.5-rolling-202408010023
Why the issue appeared?
Will be filled on close
Is it a breaking change?
Unspecified (possibly destroys the router)
Issue type
Bug (incorrect behavior)

Event Timeline

n.fort changed the task status from Open to In progress.
n.fort claimed this task.
n.fort added a project: VyOS Rolling.