Error: undefined method `overlap?' for nil:NilClass
-
Craig Bugzefsky- State changed from new to open
This is likely a result of us mishandling remarks.
I'll confirm that once I have remark handling fixed.
-
Craig Bugzefsky
Does this go away once you strip out remarks, or run the 1.0.1 build with the improved punctuation handling?
-
jthThis goes away after stripping out remarks. Checking out new version now.
-
jth
Whoops, this one wasn't affected by remarks. Still checking new version now.
-
jth
Still getting wide variety of errors, different from overlap? error though.
Error parsing network spec: ["DC-DMZPUB-NTP_Hosts", [:lineno, 621]]
object-group network DC-DMZPUB-NTP_Hosts
network-object 1.2.3.128 255.255.255.128 object-group network DC2-DMZPUB-NTP_Hosts
network-object 2.3.4.128 255.255.255.128 object-group network OUR-NTP_Hosts
group-object DC-DMZPUB-NTP_Hosts <--- line 621 group-object DC2-DMZPUB-NTP_HostsError running check redundant_rules:
Error running check allow_any_service:
Error when comparing destination_port of {:destination_net=>#, :destination_port=>#, :source_net=>#, :policy=>"permit", :acl_id=>"IN-OUTSIDE", :lineno=>697, "extended"=>nil, :protocol=>#} to {:destination_net=>#, :destination_port=>#, :source_net=>#, :policy=>"permit", :acl_id=>"IN-OUTSIDE", :lineno=>698, "extended"=>nil, :protocol=>#}-- config for that last one looks like the middle lines here (perhaps object-group again?):
access-list IN-OUTSIDE remark Allow Inbound DC_Nets & Link Addresses ICMP
access-list IN-OUTSIDE extended permit icmp object-group MnSCU_Nets any object-group ICMP-Allowed
access-list IN-OUTSIDE extended permit icmp 123.45.0.0 255.255.0.0 any object-group ICMP-Allowed
access-list IN-OUTSIDE extended permit icmp 67.89.0.0 255.255.0.0 any object-group ICMP-Allowed
access-list IN-OUTSIDE extended permit icmp 234.56.7.0 255.255.255.224 anyundefined method
is_icmp?' for nil:NilClassCan't tell where this one occurred.
-
Craig Bugzefsky
Hmm, this error parsing network spec looks like something that should have been fixed by my push. That should have been coming in as [:object-group-ref "DC-DMZPUB-NTP_HOSTS"]
Please check your version of lib/flint/cisco_firewall.rb
and make sure that line 160 and 161 look like:
# table member elsif ast[0].match(/^group-object$/i) current_group.add([:object_group_ref, ast[1]])I suspect your cisco_firewall.rb was not updated when you pulled (assuming you are using git).
I'm on AIM too as cbrozefsky and google talk as craigbrozefsky if you wanna chat about this to resolve it quicker.
-
Craig Bugzefsky
I took your sample rules and created a firewall config to exercise them. I was not able to reproduce these errors. I think either I failed to previously push the changes, or your pull failed due to a local edit or something similiar.
Let me know if there is anything else I can do. I'm leaving the bug unresolved for now.
-
Craig Bugzefsky
- State changed from open to resolved
We fixed it, after flushing redis of all the cached data.
Please Sign in or create a free account to add a new ticket.
With your very own profile, you can contribute to projects, track your activity, watch tickets, receive and update tickets through your email and much more.