ClearFoundation Tracker - ClearOS
View Issue Details
IDProjectCategoryView StatusDate SubmittedLast Update
0011651ClearOSapp-firewall - Firewallpublic2016-12-14 08:042017-01-12 08:18
Reporterbchambers 
Assigned Todsokoloski 
PrioritynormalSeveritymajorReproducibilitysometimes
StatusclosedResolutionfixed 
PlatformOSOS Version
Product Version7.2.0 
Target Version7.2.0 UpdatesFixed in Version7.2.0 Updates 
Summary0011651: Firewall6 script panics when Egress app installed
DescriptionIPv4 addresses are executed in the IPv6 script:

firewall6: Egress filter enabled, blocking all outgoing traffic (except ICMP) by default
firewall6: ip6tables -t filter -A FORWARD -p icmp --icmp-type 0 -s 192.168.10.0/ 255.255.255.0 -j ACCEPT
firewall6 v1.4.21: unknown option "--icmp-type"
Try `firewall6 -h' or 'firewall6 --help' for more information.
firewall6: Running firewall panic mode...

Audit this code to either use IPv6 addresses or do not execute when IPv6 is being run:

for _, ifn in pairs(LANIF) do
        if EGRESS_FILTERING == "off" then
            iptables("filter", "-A FORWARD -i " .. ifn .. " -j " .. accept_target)
        else
            if if_exists(ifn) then
                __, netmask, network, __= GetInterfaceInfo(ifn)

                iptables("filter",
                    string.format("-A FORWARD -p icmp --icmp-type 0 -s %s/%s -j %s", network, netmask, FW_ACCEPT))
                iptables("filter",
                    string.format("-A FORWARD -p icmp --icmp-type 8 -s %s/%s -j %s", network, netmask, FW_ACCEPT))
                iptables("filter",
                    string.format("-A FORWARD -p icmp --icmp-type 11 -s %s/%s -j %s", network, netmask, FW_ACCEPT))
                iptables("filter",
                    string.format("-A FORWARD -s %s/%s -j %s", network, netmask, FW_DROP))
            end
        end
    end
Steps To Reproduce
Additional Information
TagsNo tags attached.
Relationships
Attached Files
Issue History
Date ModifiedUsernameFieldChange
2016-12-14 08:04bchambersNew Issue
2016-12-14 08:04bchambersStatusnew => assigned
2016-12-14 08:04bchambersAssigned To => dsokoloski
2016-12-20 08:53user2Target Version => 7.2.0 Updates
2016-12-20 08:54user2Statusassigned => resolved
2016-12-20 08:54user2Fixed in Version => 7.2.0 Updates
2016-12-20 08:54user2Resolutionopen => fixed
2017-01-12 08:18user2Statusresolved => closed

There are no notes attached to this issue.