Maniphest T2199

Rewrite firewall in new XML/Python style
Open, WishlistPublic
Actions

Assigned To

None

Authored By

	jjakob
	Apr 2 2020, 11:48 AM

Tags

Subscribers

Details

Difficulty level: Unknown (require assessment)
Version: -
Why the issue appeared?: Will be filled on close
Is it a breaking change?: Perfectly compatible
Issue type: Internal change (not visible to end users)

Related Objects
Search...

		Status	Subtype	Assigned	Task
		Open		None	T2199 Rewrite firewall in new XML/Python style
		Resolved	BUG	c-po	T3456 firewall: rules that should be deleted seem to be still in use
		Open	BUG	None	T1292 Issues while deleting all rules from a firewall
		Open	FEATURE REQUEST	None	T3286 Switch the firewall from iptables to nftables
		Open	FEATURE REQUEST	None	T1097 Make firewall groups work everywhere that's appropropriate
		Open	BUG	None	T2503 IPv6 Firewall configuration error: Cannot delete rule set "GUEST-WAN-6" (still in use)
		Open	FEATURE REQUEST	None	T3495 Modernising port/protocol definitions
		Open	BUG	None	T3513 Attempting to remove firewall rule results in error
		Resolved	BUG	zsdc	T1643 Deleting all firewall zones failed and locked out box
		Resolved	FEATURE REQUEST	Viacheslav	T3568 Add XML for firewall conf-mode
		Resolved	BUG	SrividyaA	T3569 Firewall wrong completion help values
		Open	FEATURE REQUEST	None	T3580 Refactoring firewall ipv6 rule icmpv6
		Open	FEATURE REQUEST	None	T3560 Ability to create groups of MAC addresses
		Open	BUG	None	T3390 Expansion of a range in an address-group doesn't include the new addresses after commit
		Needs testing	BUG	Dmitry	T2045 Can't commit due to with the same name, but different firewall groups types
		Open		None	T2194 "show firewall" garbled output
		Open	BUG	None	T2251 VRF communication breaks when utilizing zone-based firewalling
		Open	FEATURE REQUEST	None	T478 Firewall address group (multi and nesting)

Event Timeline

jjakob triaged this task as Wishlist priority.Apr 2 2020, 11:48 AM

jjakob created this task.

jjakob created this object in space S1 VyOS Public.

pasik added a subscriber: pasik.Apr 2 2020, 3:35 PM

jjakob mentioned this in T2189: Adding a large port-range will take ~ 20 minutes to commit.Apr 8 2020, 10:49 PM

mpueschel added a subscriber: mpueschel.Apr 22 2020, 2:01 PM

efficiosoft added a subscriber: efficiosoft.Jul 22 2020, 8:13 AM

Codec added a subscriber: Codec.Feb 28 2021, 6:53 PM

c-po added a subtask: T3456: firewall: rules that should be deleted seem to be still in use.Apr 3 2021, 5:45 PM

Viacheslav added a subtask: T1292: Issues while deleting all rules from a firewall.Apr 4 2021, 3:32 PM

Viacheslav added a subtask: T3286: Switch the firewall from iptables to nftables.Apr 4 2021, 3:35 PM

Viacheslav added a subtask: T1097: Make firewall groups work everywhere that's appropropriate.

Viacheslav added a subtask: T2503: IPv6 Firewall configuration error: Cannot delete rule set "GUEST-WAN-6" (still in use).Apr 4 2021, 3:38 PM

GitHub <noreply@github.com> closed subtask T3456: firewall: rules that should be deleted seem to be still in use as Resolved.Apr 5 2021, 12:51 PM

c-po reopened subtask T3456: firewall: rules that should be deleted seem to be still in use as Backport pending.Apr 5 2021, 12:54 PM

c-po closed subtask T3456: firewall: rules that should be deleted seem to be still in use as Resolved.Apr 8 2021, 7:35 PM

c-po added a subtask: T3495: Modernising port/protocol definitions.Apr 25 2021, 9:44 AM

Viacheslav added a subtask: T3513: Attempting to remove firewall rule results in error.May 4 2021, 2:04 PM

Viacheslav added a subtask: T1643: Deleting all firewall zones failed and locked out box.May 4 2021, 2:20 PM

Viacheslav added a subtask: T3568: Add XML for firewall conf-mode.May 21 2021, 2:25 PM

Viacheslav added a project: VyOS 1.4 Sagitta.

Viacheslav added a subtask: T3569: Firewall wrong completion help values.May 22 2021, 2:22 PM

SrividyaA changed the status of subtask T3569: Firewall wrong completion help values from Open to Confirmed.May 25 2021, 6:22 PM

c-po closed subtask T3569: Firewall wrong completion help values as Resolved.May 25 2021, 6:27 PM

Viacheslav changed the status of subtask T3568: Add XML for firewall conf-mode from Open to Needs testing.May 25 2021, 8:20 PM

Viacheslav added a subtask: T3560: Ability to create groups of MAC addresses.May 26 2021, 3:45 PM

Viacheslav added a subtask: T3390: Expansion of a range in an address-group doesn't include the new addresses after commit.May 26 2021, 6:22 PM

Viacheslav added a subtask: T2045: Can't commit due to with the same name, but different firewall groups types.May 27 2021, 11:05 AM

Viacheslav added a subtask: T2194: "show firewall" garbled output.Aug 2 2021, 3:49 PM

Viacheslav closed subtask T1643: Deleting all firewall zones failed and locked out box as Resolved.Aug 17 2021, 4:00 PM

c-po added a subtask: T2251: VRF communication breaks when utilizing zone-based firewalling.Aug 27 2021, 5:16 PM

c-po closed subtask T3568: Add XML for firewall conf-mode as Resolved.

erkin set Issue type to Internal change (not visible to end users).Mon, Aug 30, 7:48 AM

erkin removed a subscriber: Active contributors.

Viacheslav added a subtask: T478: Firewall address group (multi and nesting).Mon, Sep 13, 1:14 PM

eronlloyd added a subscriber: eronlloyd.Fri, Sep 24, 12:58 PM