Project

General

Profile

Actions
Copy link

Bug #16095

closed

Firewall generates invalid rules for IPsec tunnels with descriptions containing special symbols

Added by Georgiy Tyutyunnik about 1 month ago. Updated 30 days ago.

Status:
Resolved
Priority:
Normal
Assignee:
Marcos M
Category:
IPsec
Target version:
2.8.0
Start date:
Due date:
% Done:

100%

Estimated time:
Plus Target Version:
25.03
Release Notes:
Default
Affected Version:
Affected Architecture:

Description

IPSec tunnel description accepts special symbols, but creates an error in filter reload since Filter rules don't accept special symbols in description, and tunnel creates an auto-generated rule with description containing the tunnel description.
Steps to reproduce:
1) create an IPSec tunnel, add description with special symbols (for example ";';L"/\=^:= = )
2) save the tunnel
Error attached
tested on both 24.11 and 25.03-BETA
24.11-RELEASE (amd64)
built on Wed Nov 27 21:22:00 +03 2024
FreeBSD 15.0-CURRENT

25.03-BETA (amd64)
built on Thu Mar 6 2:40:00 CET 2025
FreeBSD 15.0-CURRENT

Files

error.txt (552 Bytes) error.txt Georgiy Tyutyunnik, 03/14/2025 12:38 PM
Actions
Copy link
 #1

Updated by Christopher Cope about 1 month ago

  • Status changed from New to Confirmed

Tested and confirmed on

25.03-BETA (amd64)
built on Thu Mar 6 1:40:00 UTC 2025
FreeBSD 15.0-CURRENT

Of note, the Description field says "A description may be entered here for administrative reference (not parsed)."

Perhaps the label should use something other than the description. Otherwise, some input validation is needed.

Actions
Copy link
 #2

Updated by Marcos M about 1 month ago

  • Status changed from Confirmed to In Progress
  • Assignee set to Marcos M
  • Target version set to 2.8.0
  • Plus Target Version set to 25.03
Actions
Copy link
 #3

Updated by Marcos M about 1 month ago

  • Status changed from In Progress to Feedback
  • % Done changed from 0 to 100
Actions
Copy link
 #4

Updated by Danilo Zrenjanin about 1 month ago

  • Status changed from Feedback to Resolved

I tested against the latest dev version.

The issue has been fixed.

I am marking this ticket as resolved.

Actions
Copy link
 #5

Updated by Jim Pingle 30 days ago

  • Subject changed from IPSec tunnel description with special symbols produce errors in filter reload to Firewall generates invalid rules for IPsec tunnels with descriptions containing special symbols
Actions
Copy link

Also available in: Atom PDF