proxmox-firewall did not include the auto-generated IPAM ipsets when looking up ipsets in the firewall rule generation logic. This would cause proxmox-firewall to fail generating a ruleset when those IPAM ipsets were included in the ruleset. This is a regression introduced in the patch series that added support for legacy ipset / alias names [1].
This issue was reported in the forum by a user [2]. [1] https://lore.proxmox.com/all/[email protected]/ [2] https://forum.proxmox.com/threads/sdn-aliases-not-found-by-firewall.180549/ proxmox-firewall: Stefan Hanreich (2): firewall: chore: autoformat imports firewall: fix ipset lookup for auto-generated ipam ipsets proxmox-firewall/src/config.rs | 48 +++- proxmox-firewall/src/firewall.rs | 11 +- proxmox-firewall/tests/input/host.fw | 2 + .../integration_tests__firewall.snap | 250 +++++++++++++++++- 4 files changed, 293 insertions(+), 18 deletions(-) Summary over all repositories: 4 files changed, 293 insertions(+), 18 deletions(-) -- Generated by git-murpp 0.8.0
