As the title says, I have 3 OPNSense firewalls running on 3 different platforms, all are OPNsense 25.1.9_2-amd64 version. I cannot add/edit/clone any rule under Firewall - Automation - Filter. When I click on "+" button, nothing happens. Same on edit/clone.
I used vicuna theme, switched to opnsense just to see if it makes any difference - it does not.
I have also checked developer tools - but clicking on those buttons does not generate any action.
I have tried varius browsers on my mac (chrome, chrome incognito, mozilla, safari) as well as on windows PC (chrome, chrome incognito, mozilla) and they all have the same behavior.
Adding rule under Firewall - Rules - ... works without any issues.
Anyone else experiencing the same? What am I missing?
Hello, we can recreate the issue and look into it. Thanks.
I think we found it.
Can you try this from the SSH shell:
opnsense-patch https://github.com/opnsense/core/commit/b5e0b0b7dcb603d4464f1a3eb6a5491d79b70b0d
I did try, got an error:
Fetched b5e0b0b7dcb603d4464f1a3eb6a5491d79b70b0d via https://github.com/opnsense/core
1 out of 1 hunks failed while patching opnsense/mvc/app/views/OPNsense/Firewall/filter_rule.volt
Result is still the same - no rule can be added.
My mistake the patch is based on current master and not on the stable branch.
Try this one:
opnsense-patch https://github.com/opnsense/core/commit/1748dd18c3356099a570b008c707d65659e7241f
This one worked and i can add rules after. Also edit and clone works.
Thanks for reporting and testing this :)
Well, thanks for the fix.
I have pretty much the same problem since I updated from the last 2024 version in several steps to 25.7.7 lately.
The list of rules appears to be empty and they also can not be not found via the API.
They are in my last config dump, however and I restored the router from that dump, sadly to no avail (Filter rules still empty).
None of the patches above do apply for me. What can I do to further diagnose the problem?
It requires an interface selection if the rules are not in floating. Maybe thats the issue?
Oh yes, thank you, I totally missed that change!
All rules are there, once I select the interface.
Now I'll go and see how the api has changed because my external scripts that have worked for years don't find them any longer as well. ;-)
Thanks again!
The API can take a comma separated string of interfaces ("" empty string is floating). So e.g LAN,,WAN will produce all LAN, Floating, WAN. (search endpoint).