Project

General

Profile

Actions
Copy link

Bug #12529

closed

Interface group name starting with a digit creates invalid XML for rule separators

Added by Jens Groh about 3 years ago. Updated almost 3 years ago.

Status:
Resolved
Priority:
Very Low
Assignee:
Viktor Gurov
Category:
Rules / NAT
Target version:
2.6.0
Start date:
Due date:
% Done:

100%

Estimated time:
Plus Target Version:
22.01
Release Notes:
Default
Affected Version:
2.5.2
Affected Architecture:
amd64

Description

Tested on: 2.5.2 as well as plus-25.01

As per the definition of Interface groups, group names may have digits in it and even start with one (for sorting purposes):

Only letters (A-Z), digits (0-9) and '_' are allowed. The group name cannot end with a digit.

Creating groups like that is fine, however if you create a firewall rule on such a group, it gets an immediate rollback error, the rule is discarded and the last config reinstated.

Could this be fixed please as numbers seem the only good way to structure interface groups in case of "sorting" them so they follow a specific order (as my last observation was, that groups are written to pf.conf in a sorted order and not the order they are created in - which is good!). If you need mulitple groups and want to create a specific flow that you can rely on (group 1_test, 2_foo, 3_bar) and to have rules in the right order, it's a great helper.

Cheers
\jens

Files

clipboard-202111181525-fvlzj.png (28.9 KB) clipboard-202111181525-fvlzj.png Jim Pingle, 11/18/2021 02:25 PM
Actions
Copy link

Also available in: Atom PDF