ClearFoundation Tracker - ClearOS
View Issue Details
IDProjectCategoryView StatusDate SubmittedLast Update
0000447ClearOSfirewallpublic2012-02-27 15:452012-04-18 19:39
Reporterdsokoloski 
Assigned Todsokoloski 
PrioritynormalSeverityminorReproducibilityalways
StatusclosedResolutionfixed 
PlatformOSOS Version
Product Version 
Target VersionFixed in Version 
Summary0000447: Firewall rule host/domain name resolution
DescriptionThe current ClearOS firewall (all versions) uses gethostbynam() to resolve host/domain names. If the look-up is successful, one one IP address is returned to the calling firewall script. This is not correct behavior for multi-homed servers where more than one address is assigned (ex: google.com).

For those users who want to block a host/domain name, the firewall __lua_gethostbyname function needs to be changed to use getaddrinfo which returns multiple addresses.
Steps To Reproduce
Additional Information
TagsNo tags attached.
Relationships
Attached Files
Issue History
Date ModifiedUsernameFieldChange
2012-02-27 15:45dsokoloskiNew Issue
2012-02-27 15:45dsokoloskiStatusnew => assigned
2012-02-27 15:45dsokoloskiAssigned To => dsokoloski
2012-02-28 11:35dsokoloskiCheckin
2012-02-28 11:35dsokoloskiNote Added: 0000409
2012-02-28 11:35dsokoloskiStatusassigned => resolved
2012-02-28 11:35dsokoloskiResolutionopen => fixed
2012-04-18 19:39user2Statusresolved => closed

Notes
(0000409)
dsokoloski   
2012-02-28 11:35   
Source Code Changelog
---------------------------------------------------
- Changed __lua_gethostbyname to use getaddrinfo, returns a LUA table with one or more IPv4 or IPv6 (depending on build options) addresses. [fixed tracker 0000447]

File Changes
---------------------------------------------------
Details: http://code.clearfoundation.com/svn/revision.php?repname=ClearOS&rev=3399 [^]
U packages/firewall/trunk/firewall.c
U packages/firewall/trunk/firewall.spec.in