Bug #6976
closed
Interface group and alias with same name creates firewall syntax error
100%
Description
The firewall fails to reload when using the same name for an alias and interface group.
Steps to reproduce:
1. Create interface group with name "TestFirewall" assign atleast one interface.
2. Create alias with name "TestFirewall", for example to IP 8.8.8.8
3. Create a filewall rule on the interface group "TestFirewall" and use the alias "TestFirewall" in this rule.
4. Reload the firewall (apply config changes).
5. PFSense will report a syntax error (red alert icon in the right top of the webinterface).
Updated by Jim Pingle about 8 years ago
- Category set to Web Interface
- Status changed from New to Confirmed
- Assignee set to Anonymous
- Target version set to 2.4.0
This is also a problem on 2.4.
Input validation should prevent an alias from using a name that is already an interface or group name, and it should also prevent an interface group from using a name used by aliases.
/interfaces_groups_edit.php
- DOES prevent a group name from overlapping an existing interface - This is OK
- DOES NOT prevent a group name from overlapping an alias - This must be fixed
/firewall_aliases_edit.php
- DOES NOT prevent an alias name from overlapping an existing interface (e.g. WAN, OPT1) - This must be fixed
- DOES NOT prevent an alias name from overlapping an interface group name - This must be added
Updated by Renato Botelho about 8 years ago
- Assignee changed from Anonymous to Renato Botelho
I'll handle it
Updated by Renato Botelho about 8 years ago
- Status changed from Confirmed to Feedback
- % Done changed from 0 to 100
Applied in changeset 7ec6e2831fe56514e90fcbd2beb5af52b7054ab6.
Updated by Jim Pingle almost 8 years ago
- Status changed from Feedback to Resolved
All of the problem cases work as expected now. Names are rejected as being in use, I was not able to make a conflict.
Updated by Jim Pingle almost 8 years ago
- Target version changed from 2.4.0 to 2.3.3