NethServer 6

Other notes from QA of #2783

• when creating a zone as origin or destination of a rule, the zone is not written on shorewall configuration files after that apply changes button was pressed,
• the green net is reported as "loc" in the shorewall configuration files but "loc" is not defined.

• it is not clear whether a rule is enabled or not in the rule list view,
• it is not possible to dynamically add members of a hosts group when setting the options about origin and destination of a rule.

Tested Firewall Rules¶

Case 1

Firewall Rules > Create rule at bottom

• Set Source, created new host OTF
• Set description and LOG
• Saved, Edit again
• Set Destination, created new host-group and zone OTF
• Set Service, created new service OTF
  Missing label Services_CreateService_label
• Save, APPLY CHANGES:
  Event firewall-adjust SUCCESS

OK, missing label

Case 2

Firewall Rules > Edit existing rules

• Changed Source/Destination
• Changed description
• Changed LOG

OK

Case 3

Firewall Rules > Delete rule

OK, rule dropped

Notes

• capital letters are not allowed on fwobjects keys (?)
• Module header is "Firewall rules [beta]": time to remove [beta]??
• Missing labels Host_key_exists_message, @Services_CreateService_label
• The rules index view shows the label "all" instead of "Any"

Tested Firewall objects¶

Case 1 FAILED
Edit host-group members

Inconsistent validation of Members field in host-groups tab
Upper case letters are not allowed in member key.

Case 2 FAILED
Edit host, to change IP address

Inconsistent validation of host key in hosts tab:
If host was created OTF with upper-case letter, validation fails.

Case 3 OK
Edit service record, to change service port

Case 4 OK
Edit zone record, to change network address or interface

Case 5 FAILED
Delete host object, referenced by an existing rule.

Shorewall restart silently fails; in messages:

Restarting shorewall:    ERROR: Unknown destination zone (tcp) /etc/shorewall/rules (line 77)

In /etc/shorewall/rules (with line numbers):

    73    #
    74    # RULE role;green -> host;Birro 
    75    #
    76    ?COMMENT SMTP to g1
    77    DROP:none    loc        tcp    12135
--------------------------------^ missing destination field

Case 6 FAILED
Delete zone object, referenced by an existing rule

Shorewall restart silently fails; in messges:

Restarting shorewall:    ERROR: Unknown source zone (neth) /etc/shorewall/rules (line 83)

Case 7 OK but..
Delete service object, referenced by existing rule.

Shorewall restart is OK, but the rule is not outputted at all in /etc/shorewall/rules:
Is it the expected behaviour?