Bug #14335
closed
Associated firewall rule for NAT port forward does not inherit ``nosync`` property, gets synchronized
100%
Description
If a user creates a port forward and checks the box to disable XMLRPC sync, this property is not copied to an automatic associated firewall rule. As a consequence, the port forward does not synchronize (expected) but the associated firewall rule ends up on the secondary (unexpected).
It may not be possible to correct existing rules, but it can be fixed for new entries going forward.
Related issues
Updated by Jim Pingle 12 months ago
- Status changed from New to In Progress
- Assignee set to Jim Pingle
- Plus Target Version changed from 23.09 to 23.05
This is a much smaller fix than I anticipated. Commit inbound.
Updated by Jim Pingle 12 months ago
- Status changed from In Progress to Feedback
- % Done changed from 0 to 100
Updated by Danilo Zrenjanin 12 months ago
In my testing before and after applying the patch, both the port forward and firewall-associated rule get copied to the secondary even though the No XMLRPC Sync option is checked.
Please check.
Updated by Jim Pingle 12 months ago
- Follows Regression #14316: Filter/NAT rules configured with "No XMLRPC Sync" enabled are still synchronized added
Updated by Jim Pingle 12 months ago
- Status changed from Feedback to Resolved
Working as expected on current snapshots. Associated firewall rule inherits the nosync property, and neither the NAT rule nor the associated firewall rule appear on the secondary.