Bug #2846

Firewall: add migration fragment for tc database

Added by Giacomo Sanchietti almost 7 years ago. Updated almost 7 years ago.

Status:CLOSEDStart date:
Priority:NormalDue date:
Assignee:-% Done:

100%

Category:nethserver-firewall-base
Target version:v6.5
Security class: Resolution:
Affected version:v6.5 NEEDINFO:No

Description

Old implementation of tc database uses non-capitalized properties.
Add a migration fragment to capitalize all properties and avoid problems when updating a machine with the old implementation.

Quick fix:

sed -i -e 's/description/Description/g' -e 's/priority/Priority/g' -e 's/proto/Proto/g'  -e 's/in/In/g' -e 's/out/Out/g'   /var/lib/nethserver/db/tc

Related issues

Related to NethServer 6 - Enhancement #2774: Firewall: support objects on port forward and traffic sha... CLOSED

Associated revisions

Revision 1096081a
Added by Giacomo Sanchietti almost 7 years ago

Migration fragment 000_capitalize_props for tc DB. Refs #2846

History

#1 Updated by Giacomo Sanchietti almost 7 years ago

  • Related to Enhancement #2774: Firewall: support objects on port forward and traffic shaping rules added

#2 Updated by Giacomo Sanchietti almost 7 years ago

  • Status changed from NEW to TRIAGED
  • Target version set to v6.5
  • % Done changed from 0 to 20

#3 Updated by Giacomo Sanchietti almost 7 years ago

  • Status changed from TRIAGED to ON_DEV
  • % Done changed from 20 to 30

#4 Updated by Giacomo Sanchietti almost 7 years ago

  • Status changed from ON_DEV to MODIFIED
  • % Done changed from 30 to 60

#5 Updated by Giacomo Sanchietti almost 7 years ago

  • Assignee set to Giacomo Sanchietti

#6 Updated by Giacomo Sanchietti almost 7 years ago

  • Status changed from MODIFIED to ON_QA
  • Assignee deleted (Giacomo Sanchietti)
  • % Done changed from 60 to 70
Package in nethserver-testing:
  • nethserver-firewall-base-2.0.0-2.2git1096081.ns6.noarch.rpm

Test case 1

  • Install a machine with the old firewall package
  • Create some rules for traffic shaping
  • Configure at least one interface for traffic shaping
  • Update the package and verify the following properties are capitalized:
    • Description
    • Priority
    • Proto
    • In
    • Out

Otherwise, use the following tc db for QA process:

1=rule|description|Force SSH over fweb|Dst|0.0.0.0/0|Provider|provider;fweb|Service|fwservice;ssh|Src|192.168.1.0/24|status|enabled|Position|1
192.168.1.116=ip|description|NethVoice|priority|1
2=rule|description|Force SMTP over fweb|Dst|0.0.0.0/0|Provider|provider;fweb|Service|fwservice;smtp|Src|192.168.1.0/24|status|enabled|Position|2
3=rule|description|Force Server-manager over fweb|Dst|0.0.0.0/0|Provider|provider;fweb|Service|fwservice;server-manager|Src|192.168.1.0/24|status|enabled|Position|3
4=rule|description|Force RDP over fweb|Dst|0.0.0.0/0|Provider|provider;fweb|Service|fwservice;rdp|Src|192.168.1.0/24|status|enabled|Position|4
5=rule|description|Force Nagios over fweb|Dst|0.0.0.0/0|Provider|provider;fweb|Service|5666|Src|192.168.1.0/24|status|enabled|Position|5
53=port|description|DNS alta priorità|priority|1|proto|udp
eth1=device|description||in|5000|out|5000|priority|1
eth2=device|description|GO Business Super|in|7000|out|384

#7 Updated by Davide Principi almost 7 years ago

  • Assignee set to Davide Principi

#8 Updated by Davide Principi almost 7 years ago

  • Status changed from ON_QA to VERIFIED
  • Assignee deleted (Davide Principi)
  • % Done changed from 70 to 90

#9 Updated by Davide Principi almost 7 years ago

  • Status changed from VERIFIED to CLOSED
  • % Done changed from 90 to 100

In nethserver-updates:
nethserver-firewall-base-2.1.0-1.ns6.noarch.rpm

Also available in: Atom PDF