WIZARDS.FIREWALL_IMPORT.ERRORS.CREATING_FW_CLUSTER.0

[yakov616]

Good afternoon, I'm trying to make an import wizard, but I always get the same error (shown in the screenshot of the web ui). I tried to connect both via ssh and through the agent. I also tried 2 server side installations: as a service in linux and via docker.
The api logs contain the following error :
fwcloud-api | 2022-10-17 13:48:35|ERROR|Error during input validation check: {"isJoi":true,"name":"ValidationError","details":[{"message":"\"plugins\" is required","path":["plugins"],"type":"any.required","context":{"key":"plugins","label":"plugins"}}]}

 

[Carles Munyoz]

It is a bug in the last release that we have published some days ago.
We are going to solve it and publish a patch release in the next days.
Sorry us for the inconvenientes.

 

[yakov616]

Oh great, thanks!

 

[yakov616]

Could you tell me if the auto-discovery of existing iptables rules will be implemented?

 

[Carles Munyoz]

The import wizard will try to import the existing IPTables rules into the imported firewall.
We have already solved the problem and the new patch release will be available today.

 

[Carles Munyoz]

We have already generated a new FWCloud-UI patch version (1.5.5) which solves this bug.
Please, update it and confirm if all goes fine now.
Thank you very much for your feedback.

 

[yakov616]

Yes, I have made an update, but I get this error
And the input entries look like this

 

[Carles Munyoz]

There is a problem with the `iptables-save` data, in the line 86.

Can you run the next command in the firewall you are trying to import and send the result?

iptables-save | head -n 87 | tail -n 10

 

[yakov616]

root@Ubuntu2-myagkov:~# iptables-save | head -n 87 | tail -n 10
-A PREROUTING -m addrtype --dst-type LOCAL -j DOCKER
-A OUTPUT ! -d 127.0.0.0/8 -m addrtype --dst-type LOCAL -j DOCKER
-A POSTROUTING -s 172.17.0.0/16 ! -o docker0 -j MASQUERADE
-A POSTROUTING -s 172.18.0.0/16 ! -o br-35adf6e83d9a -j MASQUERADE
-A POSTROUTING -s 172.17.0.2/32 -d 172.17.0.2/32 -p tcp -m tcp --dport 5000 -j MASQUERADE
-A POSTROUTING -s 172.18.0.2/32 -d 172.18.0.2/32 -p tcp -m tcp --dport 8443 -j MASQUERADE
-A POSTROUTING -s 172.18.0.3/32 -d 172.18.0.3/32 -p tcp -m tcp --dport 3000 -j MASQUERADE
-A POSTROUTING -s 172.18.0.4/32 -d 172.18.0.4/32 -p tcp -m tcp --dport 8086 -j MASQUERADE
-A POSTROUTING -s 172.18.0.2/32 -d 172.18.0.2/32 -p tcp -m tcp --dport 8080 -j MASQUERADE
-A DOCKER -i docker0 -j RETURN

 

[Carles Munyoz]

Do you have Docker in the firewall that you are trying to import?
Have you already read our FWCloud & Docker documentation?

 

[yakov616]

I haven't had time to read this section yet, but now it's much clearer, thank you!

 

[Carles Munyoz]

Great!
If you need more help don't hesitate in contacting us again.