Old rules deprecation

[OPNenthu]

One more thing: the hyperlinks in Firewall->Groups continue to point to the legacy Rules UI which is now empty.  I'm guessing that's the case in more places wherever links exist to 'firewall_rules.php' or 'firewall_rules.php?if=<name>'.

Since the legacy rules UI is going to be around for a long while still, could we have an option to update all the links in OPNsense to point to the new UI?  Or is that not really in the cards because the links are static?

[franco]

Can you add a ticket for this? There's two spots actually.

src/opnsense/mvc/app/views/OPNsense/Firewall/group.volt:                                return '<a href="/firewall_rules.php?if='+row.ifname+'">'+row.ifname+'</a>';
src/opnsense/mvc/app/views/OPNsense/Interface/overview.volt:                                    $a_fw = $anchor.clone().attr('href', '/firewall_rules.php?if=' + row.identifier);

Not sure what to do.  We can't make a single decision here and removing the links may be better.


Cheers,
Franco

[OPNenthu]

https://github.com/opnsense/core/issues/9672

[Seimus]

Would it be possible to have the Statistic section in a single row if I expand its section?

https://github.com/opnsense/core/issues/9674

Regards,
S.

[julsssark]

Could rule # be displayed in the statics column (or its own column or within the details dialog)? It would make downstream log management more convenient. Today, you need to trigger a rule and catch it in live view, or do some text file manipulation. If it's a feasible request, I can open an issue and help test.

[Monviech (Cedrik)]

If you mean the rule refid (aka whats used in the live log), that is volatile and only exists inside the lifetime of the log. It cannot be added to the rules.

[OPNenthu]

If you mean the rule refid (aka whats used in the live log), that is volatile and only exists inside the lifetime of the log. It cannot be added to the rules.

Wait what?  Do you mean this?

You cannot view this attachment.

I think I wrote a post on another thread where I suggested to use the rule ID for parsing firewall logs with Monit and nobody corrected me! Uff.

Do rules in OPNsense have a persistent identifier at all?

[Monviech (Cedrik)]

Oh thats the UUID I think, you can just use the bootgrid menu to unhide it. At the top right next to the number dropdown that changes how many lines can be seen (50).

[OPNenthu]

Phew. :)

I'm not sure if that's what @julsssark is asking for, but I got nervous with your response.  Thanks.

[Monviech (Cedrik)]

There is some kind of volatile ID inside the live log that changes and out of that the current rule reference is generated (aka the UUID). So you can map from the live log to the firewall rule (the firewall rule uuid will always be the same), but you cannot map from the firewall rule to a specific livelog ID.

But not 100% sure here, just somethibg I picked up a while ago I think.

[OPNenthu]

Unless I'm mistaken, I'm seeing that the rule UUIDs have changed since I migrated my rules to the new UI.  They no longer match the UUIDs I had used in my Monit tests.

Do those UUIDs persist between config imports and OPNsense updates?

[julsssark]

I was looking for "rulenr" as displayed in the live-view details dialog. I use them in Grafana for log analysis of specific rules.