Rules migration - has something started happening automatically?

[ZPrime]

I'm on 26.1.11_10

I checked out the Rules (new) section and all of my rules from the legacy section appear to have been added over there already. I don't recall doing any export -> import dance... but searching this forum I'm seeing references that the migration "wizard" is 100% manual.

Has this changed and things have now been migrated automatically? Or is the only way to see things in "Rules (new)" from a manual import? (it's possible I did this late one night then forgot... nobody else logs in to this OPNsense system but me though.)

[Monviech (Cedrik)]

They are just visible there, because they are active in the system. Imagine it like the automatic rules that can be seen.

They have not been migrated.

Just follow the migration assistant step by step (dont think too much, just follow it), or install the os-firewall-legacy plugin to continue using the old rules screen.

[ZPrime]

OK, so even though I can see what appear to be the "correct" rules in the (new) section, those are just "representations" of the old ones.

It was unexpected (to me) that they would be displayed at all in (new) until after I have imported them.

I have no strong attachment to the old system (although I've been using it for years). I'll run through the wizard :)

Probably more pressing is that I need to get off of ISC DHCPd; there's no simple migration path to get reservations out of there and over to dnsmasq, is there?

[dseven]

As I understand it, the new UI shows all rules that are currently in place (loaded and active), and that was done because users wanted to see the automatically-generated rules as well as their configured ones. You might notice that those active-but-not-configured rules are not editable.

As for DHCP reservations; you should be able to export them (from ISC) to a CSV file, then import to dnsmasq.

[ZPrime]

Wizards (for both firewall and outbound nat) worked great, I just dumped the CSVs and then imported and then cleared the old rules.

I have some fairly complicated stuff going on (dual-wan using gateway groups for failover, but with specific source IPs forced out certain gateways for monitoring) and it all seems to have moved over just fine. Upgraded to 26.7.1 without issue as well. :)

Going to have to tackle the DHCPd migration at some point next, thanks for the pointer dseven