"Bug" in pfSense CE 2.9.0 for ICMPv6 rule creation

m-electronics

Hi to the netgate / pfsense community,

I was configuring ICMPv6 firewall rules with specific types selected.
When I want to apply them I got an error message under the "bell" notification icon in the right corner of WebUI.

It says:

There were error(s) loading the rules (pfctl: Syntax error in config file: pf rules not loaded): /tmp/rules.debug:271: syntax error - The line in question reads [271]: pass in quick on $EXTERN reply-to ( vtnet0 fe80::d008:9aff:fe26:1b7 ) inet6 proto ipv6-icmp from any to ff00::/8 icmp6-type { any,listendone,listenrep,listqry } ridentifier 1788167319 keep state label "id=1788167319" label "tags=user_rule"

I think that is a bug since the upgrade to pfSense CE 2.9.0, because I mean before the upgrade it worked fine.

Someone else also has that "bug"?

Greetings
m-electronics

Gertjan

@m-electronics said in "Bug" in pfSense CE 2.9.0 for ICMPv6 rule creation:

pass in quick on $EXTERN reply-to ( vtnet0 fe80::d008:9aff:fe26:1b7 ) inet6 proto ipv6-icmp from any to ff00::/8 icmp6-type { any,listendone,listenrep,listqry } ridentifier 1788167319 keep state label "id=1788167319" label "tags=user_rule"

$EXTERN is an existing interface for your pfSense ?

{ any,listendone,listenrep,listqry }
Not sure why the 'any' is set here. If any is set, doesn't this imply all options are set (checked) ?

Have you checked with { any } ?

Other then that, can't see an issue with the rule that fails. (Btw : I'm not very pf proficient ^^ )

What was the rule you created in the GUI ?

m-electronics

@Gertjan Hi, thanks for your answer,

I don´t see the wood because the many trees there!

any and <other types> doesn´t make sense and some rules worked. I think the any and other types was the problem...

And yes, EXTERN is an interface on that pfSense... ;)

marcosm

https://redmine.pfsense.org/issues/13621