NethServer 6

New iprange object is saved inside the hosts database and has following properties:

• Start: first IP of the range
• End: last IP of the range
• Description: optional description

Example:

r1=iprange
    Description=My range r1
    End=192.168.5.10
    Start=192.168.5.2

New cidr object is saved inside the hosts database and has following properties:

• Network: network in CIDR format
• Description: optional description

Example:

c1=cidr
    Address=192.168.5.20/29
    Description=My cidr obj

Package in nethserver-testing:

• nethserver-firewall-base-2.5.1-1.6.g8bd943c.ns6.noarch.rpm
• nethserver-firewall-base-2.5.1-1.8.g8b98244.ns6.noarch.rpm

Test case 1

• Create an ip range named r1 with some IPs from green zone
• Create a rule using the new object:
  

  db fwrules set 1 rule Action drop Dst 'role;red' Log none Position 64 Service any Src 'iprange;r1' status enabled
  signal-event firewall-adjust
  

• Check the generated rule is correct and reports the ip range inside the green zone

Test case 2

• Create a cidr subnet named c1 with some IPs from green zone
• Create a rule using the new object:
  

  db fwrules set 2 rule Action drop Dst 'role;red' Log none Position 128 Service any Src 'cidr;c1' status enabled
  signal-event firewall-adjust
  

• Check the generated rule is correct and reports the cidr inside the green zone

VERIFIED

All OK, but one question: why not implementing the UI interface with a single checkbox? The external system behaviour is allow/drop connections from unbinded MACs: it is a boolean state.

CLOSED

In nethserver-updates:
nethserver-firewall-base-2.6.0-1.ns6.noarch.rpm