Excluding ip range with exclamation mark not work anymore in System log firewall
Before I updated to 2.1.5 I could use the exclamation mark to exclude a ip range. Now wen I, for instance, type !10.255.* in de source field I get zero results. Wen I do not set the source field I get results including the 10.255.* ranges. So i know there are ip's in the 10.255.* range in de log. It should show all the blocked/rejected ip's without the 10.255.* range but it gives me 0,0 results wen i set the source field.
Am i going crazy, or am i doing something wrong, or is this a bug?
FWIW, I have exactly the same issue. I cannot do a !172.16.15.1 in the source field or a ! 172.16.15.1 in the destination field and get any search results, but unfiltered, I do see packets sourced from/destined to that IP.
I just noticed this thread - the problem was fixed by:
You will see it is just a 1-character error that needs fixing.
The same fix was also applied to master 2.2-BETA code:
Great, yes this fixed the problem.
I removed one dollar sign and now it is working again.