Page MenuHomeVyOS Platform

IP Address range in firewall rules throws error
Closed, ResolvedPublicBUG

Description

IP address range in ipv4 firewall rules throws error on commit.

To reproduce create a firewall rule with IP address range as source or destination address:

set firewall ipv4 name test rule 100 action accept
set firewall ipv4 name test rule 100 destination address 10.0.0.1-10.0.0.3
commit

Fail to apply firewall Error found on: firewall ipv4 name test rule 100
Error message: conflicting protocols specified: ip vs. ip6

[[firewall]] failed
Commit failed

Details

Difficulty level
Unknown (require assessment)
Version
1.5-rolling-202408080021
Why the issue appeared?
Will be filled on close
Is it a breaking change?
Unspecified (possibly destroys the router)
Issue type
Bug (incorrect behavior)

Event Timeline

hsahmed updated the task description. (Show Details)
hsahmed updated the task description. (Show Details)
Viacheslav triaged this task as Normal priority.Aug 9 2024, 9:14 AM
Viacheslav changed the task status from Open to Confirmed.Aug 9 2024, 9:18 AM
Viacheslav subscribed.
table ip vyos_filter {

   ...

    chain NAME_test {
        ip6 daddr 10.0.0.1-10.0.0.3 counter accept comment "ipv4-NAM-test-100"
        counter drop comment "test default-action drop"
    }
n.fort changed the task status from In progress to Needs testing.Aug 12 2024, 11:27 AM