Closed whulshof closed 7 years ago
Can you post the rules?
#
#
#
#
#
#
#
#
# drop not ethertype ipv4 and not ethertype arp and not ethertype ipv6 ;
#
#
#
tag odoo id 1000 # arbitrary, but must be unique enum 100 chocque # has no meaning to filter, but used in UI to offer a selection enum 200 nsm enum 300 magnus enum 400 bdu ; tag odoo2 id 2000 # arbitrary, but must be unique enum 100 chocque # has no meaning to filter, but used in UI to offer a selection enum 200 nsm enum 300 magnus enum 400 bdu ; tag odoo3 id 2000 # arbitrary, but must be unique enum 100 chocque # has no meaning to filter, but used in UI to offer a selection enum 200 nsm enum 300 magnus enum 400 bdu ;
tag starconfig id 2000 enum 10 users enum 20 service ;
accept ipprotocol tcp and tdiff odoo 0 or tdiff odoo2 0 or tdiff odoo3 0 # difference between odooscenario tags is 0, meaning they match and not tdiff starconfig 0 # difference between users tags is 0, meaning they match and dport 22 or dport 80 or dport 443 or dport 8069 ;
break # break can be overridden by a capability chr tcp_syn # TCP SYN (TCP flags will never match non-TCP packets) and not chr tcp_ack # AND not TCP ACK ;
cap superuser id 1000 # arbitrary, but must be unique accept; # allow with no match conditions means allow anything and everything
accept;
[cid:image001.png@01D32746.46132490]
Van: Travis LaDuke notifications@github.com Beantwoorden - Aan: zerotier/ZeroTierOne reply@reply.github.com Datum: woensdag 6 september 2017 18:43 Aan: zerotier/ZeroTierOne ZeroTierOne@noreply.github.com CC: Willem Hulshof w.hulshof@magnus.nl, Author author@noreply.github.com Onderwerp: Re: [zerotier/ZeroTierOne] tags do behave erroneous in myzerotier.com (#578)
Can you post the rules?
— You are receiving this because you authored the thread. Reply to this email directly, view it on GitHubhttps://github.com/zerotier/ZeroTierOne/issues/578#issuecomment-327543532, or mute the threadhttps://github.com/notifications/unsubscribe-auth/AK1rqe92qxXJVDwEYc6sat4-OqXKalIlks5sfsu_gaJpZM4POKWq.
I already see the problem. I copied the tag paragraphs and I did not change the id's. My mistake. Sorry.
I've defined four tags next to "superuser" (which is a capability). The UI only shows two tags in a column behind the device. If I try to manage the value of the tags in the device, pressing on the pencil, they all show, but if I fill out the second , three and four change also to "custom" or another wrong value. Effectively I can therefor only use two tags.