[OpenWrt-Devel] problems with virtual sub interfaces in firewall zones

Martin Schiller ms at dev.tdt.de
Thu May 7 01:39:26 EDT 2020


On 2020-05-07 06:47, Martin Schiller wrote:
> Hi Jo,
> Hi all,
> 
> I've encountered a problem with the change you made with commit
> 64bb88841fbc ("uqmi: inherit firewall zone membership to virtual sub
> interfaces") which was introduced to fix FS#2122.
> 
> This change makes it impossible to move an interface from one zone to
> another without a reconnect of that interface, because the related
> zone is stored during interface setup and fw3 will use this value
> even if the parent interface is already in another zone.
> 
> I have a case here, where the target zone of an (wwan/qmi) interface
> is decided by an iface-hotplug script on an if-up event and i don't
> want / can't reconnect the interface right after it's coming up.
> 
> Is there a possibility to get this working again?

What about storing the information (name) of the parent interface
instead of the zone and let fw3 dynamically take the zone of the
parent interface?

> 
> Regards,
> Martin


_______________________________________________
openwrt-devel mailing list
openwrt-devel at lists.openwrt.org
https://lists.openwrt.org/mailman/listinfo/openwrt-devel



More information about the openwrt-devel mailing list