#20380: firewall zone name length of 12 characters or more breaks all networking
--------------------------+-----------------------------------
  Reporter:  tim@…        |      Owner:  developers
      Type:  defect       |     Status:  new
  Priority:  high         |  Milestone:
 Component:  base system  |    Version:  Barrier Breaker 14.07
Resolution:               |   Keywords:
--------------------------+-----------------------------------

Comment (by hnyman):

 Replying to [comment:8 Damian Kaczkowski]:
 > {{{
 > config interface 'lan_protected'
 > ...
 >         option type 'bridge'
 > }}}
 >
 > {{{
 > config zone
 >         option name 'lan_p'
 >         list network 'lan_protected'
 > }}}
 > fw3 reload
 > {{{
 >  * Populating IPv4 filter table
 > ...
 >    * Forward 'lan' -> 'wan'
 > (null) v4: interface name `br-lan_protected' must be shorter than
 IFNAMSIZ (15)
 > }}}

 Thanks for a clear example.

 I tested yesterday with a normal non-bridged interface with a 14
 characters long name and it worked ok. But your lan_protected is bridged
 and that makes it then prefixed with "br-" making the name to be 16 chars
 in total. Your error message hints that the limit is actually 15 chars.
     interface name `br-lan_protected' must be shorter than IFNAMSIZ (15)

 Your example clearly shows that name length needs to be limited to 15
 characters.

 IFNAMSIZ is defined as 16, and the name need to be shorter:
 http://lxr.free-electrons.com/source/include/uapi/linux/if.h#L26
     #define IFNAMSIZ 16

 So 15 would be the maximum length at the first glance.

 But there can be a possible prefix, like your "br-", but also "6in4-" etc.
     root@OpenWrt:~# ifconfig
     6in4-sixxs Link encap:IPv6-in-IPv4

 That makes me wonder if the actual longest always working interface name
 regardless of the possible type would be just 10 characters taking into
 account the possibly 5 chars long prefix.

--
Ticket URL: <https://dev.openwrt.org/ticket/20380#comment:9>
OpenWrt <http://openwrt.org>
Opensource Wireless Router Technology
_______________________________________________
openwrt-tickets mailing list
[email protected]
https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-tickets

Reply via email to