Show firewall summary traceback

Running version: VyOS 1.4-rolling-202206200217

When using a address group with contains a ‘hypened entry’ like 10.10.10.5-10.10.10.10 the command show firewall summary produces a python traceback:

Ruleset Name     Description    References
---------------  -------------  ------------
DMZ-WAN
KUBERNETES-DMZ
KUBERNETES-WAN
Traceback (most recent call last):
  File "/usr/libexec/vyos/op_mode/firewall.py", line 361, in <module>
    show_summary()
  File "/usr/libexec/vyos/op_mode/firewall.py", line 321, in show_summary
    show_firewall_group()
  File "/usr/libexec/vyos/op_mode/firewall.py", line 273, in show_firewall_group
    row.append("\n".join(sorted(group_conf['address'], key=ipaddress.ip_address)))
  File "/usr/lib/python3.9/ipaddress.py", line 53, in ip_address
    raise ValueError('%r does not appear to be an IPv4 or IPv6 address' %
ValueError: '10.10.10.5-10.10.10.10' does not appear to be an IPv4 or IPv6 address

Thanks for the report. Made a task and PR’d the fix: ⚓ T4484 Firewall op-mode summary doesn't correctly handle address group containing ranges

This topic was automatically closed 2 days after the last reply. New replies are no longer allowed.