Project

General

Profile

Actions

Bug #1706

closed

"Bypass firewall rules for traffic on the same interface" is broken

Added by Andreas Damm over 10 years ago. Updated over 10 years ago.

Status:
Resolved
Priority:
Normal
Assignee:
-
Category:
Rules / NAT
Target version:
Start date:
07/22/2011
Due date:
% Done:

0%

Estimated time:
Plus Target Version:
Release Notes:
Affected Version:
2.1-IPv6
Affected Architecture:
i386

Description

Turning on the "Bypass firewall rules for traffic on the same interface" option will not generate the required firewall rules.

The reason can be found in "/etc/filter.inc" in function "filter_rules_generate" when it is checking for configuration option "bypassstaticroutes" -- the following check will always fail "is_ipaddrv4($route['network'])" because the network portion of a route is in the format

<address>/<prefix length> 

Hence no rules are generated.

Actual version I am using is "2.0-RC3-IPv6".

Actions #1

Updated by Chris Buechler over 10 years ago

  • Target version set to 2.1
  • Affected Version changed from 2.0 to 2.1-IPv6

that's only an issue in IPv6, 2.1.

Actions #2

Updated by Seth Mos over 10 years ago

  • Status changed from New to Resolved

Resolved by a commit a week ago when I ran into this myself on my lab setup.

Actions

Also available in: Atom PDF