Regression #14918
closed
Filter rules error with 1:1 NAT rules that use the interface subnet macro
Added by Marcos M about 1 year ago.
Updated about 1 year ago.
Plus Target Version:
23.09
Release Notes:
Force Exclusion
Affected Architecture:
All
Description
Create a binat rule using an interface subnet macro for the internal IP, then save/apply:
There were error(s) loading the rules: /tmp/rules.debug:2023: syntax error - The line in question reads [2023]: binat on openvpn inet from to 172.25.1.0/24 -> 172.20.10.1
@ 2023-10-24 14:44:09
Files
- Status changed from In Progress to Pull Request Review
- Status changed from Pull Request Review to Feedback
- % Done changed from 0 to 100
I was able to reproduce the issue. The patch fixes it.
However, if you choose:
(External Subnet IP) - WAN address
(Internal IP) - LAN subnet
It will automatically update the External Subnet IP to the Interface subnet.
binat on em0 inet from 192.168.1.0/24 to any -> 192.168.33.200/24
While the GUI still shows the WAN address as a selection for the External Subnet IP:
I believe there is room for improvement.
- Status changed from Feedback to Resolved
That particular behavior (mask-bit in the NAT address) is not new.
- Target version changed from 2.8.0 to 2.7.1
Also available in: Atom
PDF