ClearOS Bug Tracker


View Issue Details Jump to Notes ] Issue History ] Print ]
IDProjectCategoryView StatusDate SubmittedLast Update
0011651ClearOSapp-firewall - Firewallpublic2016-12-14 08:042017-01-12 08:18
Reporterbchambers 
Assigned Todsokoloski 
PrioritynormalSeveritymajorReproducibilitysometimes
StatusclosedResolutionfixed 
PlatformOSOS Version
Product Version7.2.0 
Target Version7.2.0 UpdatesFixed in Version7.2.0 Updates 
Summary0011651: Firewall6 script panics when Egress app installed
DescriptionIPv4 addresses are executed in the IPv6 script:

firewall6: Egress filter enabled, blocking all outgoing traffic (except ICMP) by default
firewall6: ip6tables -t filter -A FORWARD -p icmp --icmp-type 0 -s 192.168.10.0/ 255.255.255.0 -j ACCEPT
firewall6 v1.4.21: unknown option "--icmp-type"
Try `firewall6 -h' or 'firewall6 --help' for more information.
firewall6: Running firewall panic mode...

Audit this code to either use IPv6 addresses or do not execute when IPv6 is being run:

for _, ifn in pairs(LANIF) do
        if EGRESS_FILTERING == "off" then
            iptables("filter", "-A FORWARD -i " .. ifn .. " -j " .. accept_target)
        else
            if if_exists(ifn) then
                __, netmask, network, __= GetInterfaceInfo(ifn)

                iptables("filter",
                    string.format("-A FORWARD -p icmp --icmp-type 0 -s %s/%s -j %s", network, netmask, FW_ACCEPT))
                iptables("filter",
                    string.format("-A FORWARD -p icmp --icmp-type 8 -s %s/%s -j %s", network, netmask, FW_ACCEPT))
                iptables("filter",
                    string.format("-A FORWARD -p icmp --icmp-type 11 -s %s/%s -j %s", network, netmask, FW_ACCEPT))
                iptables("filter",
                    string.format("-A FORWARD -s %s/%s -j %s", network, netmask, FW_DROP))
            end
        end
    end
TagsNo tags attached.
Attached Files

- Relationships

-  Notes
There are no notes attached to this issue.

- Issue History
Date Modified Username Field Change
2016-12-14 08:04 bchambers New Issue
2016-12-14 08:04 bchambers Status new => assigned
2016-12-14 08:04 bchambers Assigned To => dsokoloski
2016-12-20 08:53 user2 Target Version => 7.2.0 Updates
2016-12-20 08:54 user2 Status assigned => resolved
2016-12-20 08:54 user2 Fixed in Version => 7.2.0 Updates
2016-12-20 08:54 user2 Resolution open => fixed
2017-01-12 08:18 user2 Status resolved => closed