Compatibility with Zone Based Firewalls?

[GNU-Plus-Windows-User]

I have personally not tested this feature, but some other users in the CrowdSec Discord have reported that firewall rules and objects are not being created when using zone based firewalls. These rules are created via IPtables but they do not show up via the GUI.

By the way, I've just tested this bouncer out, I had some issues setting it up but other than that it's working great for me!

[PintjesB]

I am one of those users, but the rules are not getting created in the iptables (nor in the GUI, as mentioned). It is however visible through the API.

The IP objects are getting created correctly. But the rules using said objects aren't visible (and thus, not deletable)

[Teifun2]

Is this the UNIFI_SITE? This would be a configurable Environment Variable.

The default is the "default" site as according to documentation this is present in any unifi router.

[PintjesB]

I don't think so. Like mentioned the IP objects get created and are visible in the GUI. The rules using said objects however aren't visible in the GUI for people using the new Zone Based rules. People using the old firewall rules system can see the rules as intended...

[Teifun2]

FYI: I have opened a ticket with the maintainer of the unifi library to ask for guidance how to adapt.

I hope soemthing comes of it:
paultyng/go-unifi#242

[PintjesB]

Awesome!