26.07-RELEASE: Port Forward is missing pass
-
I only have one machine with 26.07-Release. For whatever reason, in Port Forward the Filter rule association pass is missing! That is very problematic for me, because almost all of my client-side-DNS is handled this way. Took me some time to figure it out.
At this time, the NAT Rules still show pass, but it is already gone from the drop-down menu of every rule.
It will probably fail in the next hours or with the first save of something, like it did before on my first attempt with 26.07-Release this morning.General problem or is it just me?
Edit: In Nexus, pass is still available, but I have and had it disabled.
Edit2: Added an allow rule, so if pass breaks next time, I probably/hopefully will not notice. ;)
-
Hmm, is that only when editing an existing NAT rule? I'm failing to replicate it so far. I see:
-
I still see pass editing an existing rule too....
-
@stephenw10 said in 26.07-RELEASE: Port Forward is missing pass:
I still see pass editing an existing rule
Interesting. If I create a new rule, it is there. Then editing that rule, it is missing too.
-
Hmm, must be something about those rules hiding it. I still see it editing test rules here. Let me see if I can find it....
-
Are you forwarding from WAN that is not the default gateway?
-
@stephenw10 said in 26.07-RELEASE: Port Forward is missing pass:
Are you forwarding from WAN that is not the default gateway?
Maybe, I have many port forwards, mostly LAN-side...
Edit: Technically I might, I have some ICMP port-forward on some privacy-vpn-tunnels and one port-forward to a non existing ip-address on a S2S-tunnel, that is wan-type but also has a no-SNAT-rule. I also have a no-SNAT-group...
-
Ah, so an interface with no gateway? I'm still failing to replicate it.
There only appear to be two options and both include pass:
https://github.com/pfsense/pfsense/blob/master/src/usr/local/www/firewall_nat_edit.php#L427 -
@stephenw10 See my Edit above. Maybe tomorrow I can delete some stuff to see, if this changes things?
-
Mmm, yeah you seem to somehow be hitting some edge case. Weird though since as far as I can see there's no way to hit it! Since that can't be true I'll also keep digging...,
-
Looks like @jimp found it.
https://redmine.pfsense.org/issues/17021 -
@stephenw10 Interesting. On my first attempt though, my pfSense broke all the pass-rules at once. I remember that in the overview, none of the rules had the pass icon anymore. This time, any of the old rules do work and the icon is shown. I hope it stays that way until a complete fix is available.
-
@stephenw10 said in 26.07-RELEASE: Port Forward is missing pass:
Looks like @jimp found it.
https://redmine.pfsense.org/issues/17021Is there an easy way to incorporate these changes into pfSense Plus today? Or should I have patience.
-
@Bob.Dig said in 26.07-RELEASE: Port Forward is missing pass:
Is there an easy way to incorporate these changes into pfSense Plus today?
Copy paste the entire (bottom of the page) :
diff --git a/src/etc/inc/globals.inc b/src/etc/inc/globals.inc index bf46112b5fc5159c23406e3216b68a83e848264e..38ee5813856ad3b81e8a1733af819d48820a77f3 100644 --- a/src/etc/inc/globals.inc +++ b/src/etc/inc/globals.inc @@ -92,7 +92,7 @@ $g = [ 'disablehelpicon' => false, 'disablecrashreporter' => false, ..... + +// Association action type. +// 'associated-rule-id': Used for existing NAT rules with a linked filter rule. +// 'filter-rule-association': Used for new or existing NAT rules with no linked rules. $section->addInput(new Form_Select( - $rule_association, + $has_linked_filter_rule ? 'associated-rule-id' : 'filter-rule-association', 'Filter rule association', $pconfig['associated-rule-id'], $rulelistProduces a no-go :
But ...
when you change just this :
to
'latest_config' => '24.6',as the current pfSense Plus 26.03 config version is 24.6, you have a go :
That's something you could consider, but a green light from @jimp seems appropriate here, as changing that line to "24.8" might have 'consequences'.
Clear is that the patch was based upon a config version we don't have yet, 24.7, something that lies beyond the 26.07 Release.
Privacy Policy · Cookie Policy