ClearFoundation Tracker - ClearOS
View Issue Details
IDProjectCategoryView StatusDate SubmittedLast Update
0022621ClearOSapp-firewall - Firewallpublic2018-12-22 08:062019-05-03 02:03
ReporterNickH 
Assigned ToNickH 
PrioritynormalSeverityfeatureReproducibilityalways
StatusclosedResolutionfixed 
PlatformOSOS Version
Product Version7.6.0 Updates 
Target Version7.6.0 UpdatesFixed in Version7.5.0 Updates 
Summary0022621: Add "if" IPv4 and IPv6 blocks to local
DescriptionTo guide the user, it would be a good idea to add the following structure to the /etc/clearos/firewall.d/local file:

# IPv4 Custom Firewall Rules
#===========================

if [ "$FW_PROTO" == "ipv4" ]; then true
    # Add IPv4 rules here
fi

# IPv6 Custom Firewall Rules
#===========================

if [ "$FW_PROTO" == "ipv6" ]; then true
    # Add IPv6 rules here
fi

This will avoid rules being applied twice and will avoid rules with IPv4 IP addresses from being run during the IPv6 firewall start which makes the firewall show as "failed".
Steps To Reproduce
Additional Information
TagsNo tags attached.
Relationships
Attached Files
Issue History
Date ModifiedUsernameFieldChange
2018-12-22 08:06NickHNew Issue
2018-12-22 08:06NickHStatusnew => assigned
2018-12-22 08:06NickHAssigned To => NickH
2018-12-22 08:07NickHSummaryAdd if IPv4 and IPv6 blocks to local => Add "if" IPv4 and IPv6 blocks to local
2019-01-15 03:17NickHNote Added: 0008741
2019-02-01 12:27NickHStatusassigned => resolved
2019-02-01 12:27NickHFixed in Version => 7.5.0 Updates
2019-02-01 12:27NickHResolutionopen => fixed
2019-05-03 02:03NickHStatusresolved => closed

Notes
(0008741)
NickH   
2019-01-15 03:17   
Fixed in commit https://gitlab.com/clearos/clearfoundation/app-firewall/commit/250ef1d6391e3e9fa908f2e287b6ed3f8db25ca2 [^]