Import cleanup deletes DNS-exception rules that are never added #158
Loading…
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Every successful import's
downloaded()callsdns_request_exception("-D", ...), but the matching"-I"call exists nowhere in the codebase — upstream added the exception so hostnames in downloaded configs could resolve while the firewall is up, and the insert side was lost in the fork. The surviving delete fails 8 times per import (udp/tcp x INPUT/OUTPUT x v4/v6), each logged as a WARNING.Purely cosmetic with the firewall off, but for firewall-on users it means the thing the exception existed for is silently missing during imports. Decide whether to restore the
"-I"around the import or drop the dangling"-D"(and itsalt_dnsplumbing) entirely.Surfaced while live-verifying PR #157 — the failed-delete batch appears after every import back through the log history, so it predates that change.
🤖 Generated with Claude Code