TOS 5 -> 6 update might break guest network
switch-branch from HBS 5.x with guest Wi-Fi set up to HBK 6.0 might omit guest_turris
fw zone rename to tr_guest
leading to unapplicable guest_turris
zone related firewall rules.
The rename should be arranged automatically by firewall-zone-limit script (related to turris/foris-controller/foris-controller!97 (merged)).
Happened on Omnia with several custom bridges and related zones FW rules set up through luci. Was possible to fix by running firewall-zone-limit script manually.
I wasn't able to reproduce this on another Omnia with HBK and just basic configuration (the guest_turris
zone was renamed properly to tr_guest
during the update).
How to reproduce
- setup guest WiFi through reforis in TOS 5
- check the guest firewall zone is named
guest_turris
- upgrade (switch-branch) to TOS 6
- (optionally apply not yet merged network migration script from packages!956 (merged))
- unless
guest_turris
zone has been renamed totr_guest
the guest network now cannot access internet but can access the router web interface (should behave the other way around) and firewall outputsWarning: Section 'guest_turris' must not have a name longer than 11 characters
on manual restart (/etc/init.d/firewall restart
)