Firewall Aliases - Force reload on restored backups

Started by tracerrx, February 17, 2022, 06:40:17 PM

Previous topic - Next topic
I don't mean zhe update interval....But the timestamp of the last update of the alias in the backup. So its initially  outdated when restoring a backup.

Quote from: senser on February 21, 2022, 06:51:39 AM
I don't mean zhe update interval....But the timestamp of the last update of the alias in the backup. So its initially  outdated when restoring a backup.
I understand, I believe that would fix the problem.  When performing backups/exports of settings, set all last updated timestamps to == unix epoch.

QuoteTo replicate, create a url table alias that updated daily, let it populate.  Export the config to back, and restore the config on a new device.  The last check date will be equal to the backup date/time, and as it's set to only check daily, the url table alias will be empty unless you disable and then re-enable the alias.
hm. I do not understand how in this case the value of the last update time can appear. it is not stored in the config (so can not be "restored"). its a 'dynamic' field generated only in the model and is taken from the file "edit time".
have tested by this steps:
- create "URL Table (IPs)" Alias (FireHOL_L1) with 1 hour ttl.
- wait for Alias download.
- make config backup
- delete this alias, hit Apply
- restore backup from step 3 without restart(!)

everything correct up to this step?

'old' FireHOL_L1 alias appears in Firewall: Aliases page. with empty Loaded# and Last Update values.
FireHOL_L1 alias is not updated automatically (because filter_tables template was not updated - restart after restore was not performed)
- hit Apply on Firewall: Aliases page
filter_tables template updated, FireHOL_L1 alias downloaded immediately

Quote from: Fright on February 21, 2022, 06:25:39 PM

have tested by this steps:
- create "URL Table (IPs)" Alias (FireHOL_L1) with 1 hour ttl.
- wait for Alias download.
- make config backup
- delete this alias, hit Apply
- restore backup from step 3 without restart(!)
everything correct up to this step?

Two differences
- My TTL is set to 1 day
- While hardware has identical specs (Protectli FW6B's), I am exporting on device #1 and importing on device #2.  Device #2 is a clean install that has never had the alias defined.