issue with legacy firewall rules

[Andreas1]

I do have some OPNsense installations and somehow missed it during the upgrades to migrate the firewall rules from legacy to "new".
Now I have the current version 26.7.8_2 and no migration assistent anymore. I even tried the legacy firewall plugin (os-firewall-legacy).
Any idea how to handle that?

Thanks in advance.

[nero355]

Now I have the current version 26.7.8_2 and no migration assistent anymore.

IIRC you don't even need it : Just Export and Import the Rules again and you are done ??

Deleting the old Rules can also be done via your config.xml I think ?

There was a similar topic a week ago : https://forum.opnsense.org/index.php?topic=53280.0

[Andreas1]

Ahh, didn't saw it (I was searching for firewall migration assistent and missed out NAT).
Thanks nero355 for your help I'll try it and report back.

[thebraz]

So, it's better to migrate the rules before doing the .8 upgrade?

Thanks in advance

[chemlud]

Migrated FW rules and ountbound NAT on two 26.7.8_2 (legacy plugin was installed) last week with the migration manager. If you need to migrate, the manager is there. After migrating it's gone. So...

[Monviech (Cedrik)]

To be specific, it does not show up if there are no legacy firewall or NAT rules remaining.

So it doesnt track if a migration has been done or not with some kind of flag, it just reads remaining rules and decides on that to show or not.

[nero355]

So, it's better to migrate the rules before doing the .8 upgrade?

When 26.7.5 was released you should have migrated your Outbound NAT Rules to the new Source NAT Rules before updating to it : https://forum.opnsense.org/index.php?topic=53062.0

And the migration from Firewall Rules (Legacy) to Firewall Rules [New] was something that you should have done before upgrading from 26.1.x to 26.7.x but luckily both the Firewall Rules and NAT Rules stuff can still be done even though both have been moved to a plug-in by now... ;)

To be specific, it does not show up if there are no legacy firewall or NAT rules remaining.

So it doesnt track if a migration has been done or not with some kind of flag, it just reads remaining rules and decides on that to show or not.

NICE! :)