[resolved] rule labels unreadable in log live view

Started by actionhenkt, November 04, 2019, 08:43:46 PM

Previous topic - Next topic
November 04, 2019, 08:43:46 PM Last Edit: November 06, 2019, 10:28:12 PM by actionhenkt
Hello,

I have a problem with the rule labels in the live log viewer, the description of the label is malformed, this only happens to rules which are tagged, it is confusing to read since there also seem to be a number of different "rule numbers" for the same rule so I cant pin point where something is being blocked or allowed.

Rule label in the log viewer show up as:

058d6336d7ef0b181492e524112644f5" tag FW_LA   
058d6336d7ef0b181492e524112644f5" tag FW_LA   
e71d0ac2a6b8abbd7fdaacc7bf29d0dc" tag WAN_VL12   
e71d0ac2a6b8abbd7fdaacc7bf29d0dc" tag WAN_VL12   

instead of the actual description for each rule which should be:

058d6336d7ef0b181492e524112644f5" tag FW_LA --->>> Actual description of rule: Allow out for firewall - TCP
058d6336d7ef0b181492e524112644f5" tag FW_LA --->>> Actual description of rule:  Allow out for firewall - TCP   
e71d0ac2a6b8abbd7fdaacc7bf29d0dc" tag WAN_VL12   --->>> Actual description of rule:  VL122 to WAN - TCP
e71d0ac2a6b8abbd7fdaacc7bf29d0dc" tag WAN_VL12   --->>> Actual description of rule: VL122 to WAN - TCP

I tried reinstalling opnsense and setting tags again but im getting the same results ... is there a way to fix this or is it a bug ?

Also , is there a way to see the rule numbers where I can match it with the rule description ?


It may be an issue with the "tag" keyword... can you confirm other rules that do not tag work fine?


Cheers,
Franco

Yes I can, all other rules without tags work fine.



ah so this is resolved in the next update ? Very nice ! Thanks!

Yes and no, the sooner you can confirm the patch works the sooner it is released. To test the patch just run the following command as stated above from the OPNsense root shell:

# opnsense-patch 8a83b3bb12

Run the same command again to "unpatch" your system. Patches are always removed on updates unless they have been properly released.


Cheers,
Franco

Ok, I have applied the patch, it looks good, I have to reinstall opnsense and will try again.

labels are still looking good now after a fresh install. Thanks!

Nice, thanks. In this case we'll ship the fix in 19.7.7.


Cheers,
Franco