Project

General

Profile

Actions

Regression #13203

closed

Floating rules without an interface are not loaded

Added by Marcos Mendoza about 1 month ago. Updated about 1 month ago.

Status:
Resolved
Priority:
High
Category:
Rules / NAT
Target version:
Start date:
Due date:
% Done:

100%

Estimated time:
Plus Target Version:
22.05
Release Notes:
Force Exclusion
Affected Version:
2.7.0
Affected Architecture:

Description

In 22.01, the following floating rule with no interface can be created:

pass  quick inet proto icmp  from any to any ridentifier 1653328655 keep state  label "USER_RULE: Allow all icmp"

In 22.05, the same rule is not created and /tmp/rules.debug instead shows:

# rule Pass all icmp has no enabled interfaces label "USER_RULE: Pass all icmp"


Related issues

Related to Feature #4259: Port forward NAT rules with "any" protocolResolvedJim Pingle01/21/2015

Actions
Actions #1

Updated by Marcos Mendoza about 1 month ago

  • Description updated (diff)
Actions #2

Updated by Marcos Mendoza about 1 month ago

  • Status changed from New to Pull Request Review
Actions #3

Updated by Jim Pingle about 1 month ago

  • Assignee set to Marcos Mendoza
Actions #4

Updated by Steve Wheeler about 1 month ago

Looks good in my test case:

pass  quick inet proto icmp  from any to any ridentifier 1653328529 keep state label "USER_RULE: Pass all icmp" label "id:1653328529" 

Tested against: 22.05.b.20220523.0600

Actions #5

Updated by Marcos Mendoza about 1 month ago

  • Status changed from Pull Request Review to Feedback
  • % Done changed from 0 to 100
Actions #6

Updated by Viktor Gurov about 1 month ago

  • Related to Feature #4259: Port forward NAT rules with "any" protocol added
Actions #7

Updated by Marcos Mendoza about 1 month ago

  • Status changed from Feedback to Resolved
Actions

Also available in: Atom PDF