Solved ipaddr: cannot match ipv6 address with non-ipv6 one (in Firewall config)
-
When attempting to add comments to the blocked IP ranges in the firewall configuration (on separate lines as per the docs) I am getting the error ipaddr: cannot match ipv6 address with non-ipv6 one. Is it no longer possible to add comments or is this a bug? What does this error actually mean here?
-
This seems to have nothing to do with the comments after all. The error appears randomly when attempting to add new Ips or ranges (all IPv4) but there is no apparent logic to it.
-
@ccfu Where do you see this error? In the Cloudron dashboard? Do you have a screenshot?
It seems that error message comes from https://github.com/whitequark/ipaddr.js/blob/master/lib/ipaddr.js#L572 but we never return this error message from Cloudron code itself.
-
@girish Yes in the dashboard. Here is a screenshot:
-
@ccfu Do you think you can send me what IPs you are trying to put in the UI to support@cloudron.io (or if you don't mind it being public, you can put it here) ? Looks like some validation error.
-
@girish As they are all either on blocklists or publically listed:
5.188.206.246
74.120.14.0/24
162.142.125.0/24
167.248.133.0/24
192.35.168.0/23
77.247.110.129
45.144.225.181
71.6.232.4 -
@ccfu It seems to work fine here
Can you try removing the IP addresses one by one and check which one is causing a problem?
-
@girish Adding the individual IPs seems to work fine, but as soon as I try to add a range I get the error. This is odd though because these ranges and a few individual IPs were already in the list. The errors seem to have started occuring after the latest update to 6.2.7.
-
@ccfu simply copy'n'pasting your list from above also works for me without issues on v6.2.7. Can you double check for special characters in that input field?
Also does it fail with 2 lines already? Maybe something with the newline character?
-
@nebulon It fails with just one range being added and nothing else in the input field. I tried different browsers and checked for special characters. Without the ranges all is fine.
I am not really sure what the error message is trying to tell me to be honest as these are all IPv4.
-
@ccfu I think I found the issue here. It is actually an unhandled error coming from https://git.cloudron.io/cloudron/box/-/blob/master/src/network.js#L43
Looks like your source ip from your browser (or in the code in the auditSourcE) is set as ipv6 however the code expects ipv4.
-
@nebulon Thank you. Yes, that makes sense. Hope this can be resolved as having IPv6 as a source IP is not uncommon.
-
@ccfu ok this is now fixed with https://git.cloudron.io/cloudron/box/-/commit/5ae5566ce835406a2acee8d7bf0db9c1e31f8ffb and thus part of the next release.
-
@nebulon Fantastic, thank you!
