NethServer / nethsecurity

NethSecurity image and build environment
https://www.nethsecurity.org/
Other
98 stars 6 forks source link

Migration: remove gateway from non-red interfaces #612

Closed gsanchietti closed 3 months ago

gsanchietti commented 3 months ago

Sometimes in NS7 there is a specified default gateway not only for red interfaces but also for local interfaces green, blue, orange (this could come from a unit which at the start was a single server and then it became also a firewall). In NS7 there are no problems because gateways for local zones are ignored if there is at least one red interface.

Steps to reproduce

Expected behavior

During migration, gateways that do not belong to a RED interface should be removed to prevent any issues in NethSecurity 8.

Actual behavior

Gateways specified for local interfaces (green, blue, orange) are converted and cause problems in NethSecurity 8.

Proposed solution: remove all specified gateways during the migration if they do not belong to a RED interface.

Components

NethSecurity version: 8-23.05.3-ns.1.0.1

gsanchietti commented 3 months ago

Testing package: nethserver-firewall-migration-0.0.18-1.5.g1547e5e.ns7.noarch.rpm

Test case