0005911: PPTP forwarding only supports first LAN

View Issue Details [ Jump to Notes ]

[ Issue History ] [ Print ]

Project

Category

View Status

Date Submitted

Last Update

0005911

ClearOS

app-firewall - Firewall

public

2015-11-03 20:05

2020-03-04 09:48

Reporter

user2

Assigned To

Priority

low

Severity

minor

Reproducibility

have not tried

Status

closed

Resolution

suspended

Platform

OS Version

Product Version

7.1.0

Target Version

Fixed in Version

Summary

0005911: PPTP forwarding only supports first LAN

Description

There's a special block of code to handle PPTP forwarding:

            for __, ifn in pairs(LANIF) do
                if if_exists(ifn) then
                    ip, netmask, network, prefix = GetInterfaceInfo(ifn)

                    for ___, ifn_wan in pairs(WANIF) do
                        iptables("filter",
                            string.format("-A FORWARD -i %s -o %s -p %d -d %s -j %s",
                            ifn_wan, ifn, r_proto, r_addr, FW_ACCEPT))
                        iptables("filter",
                            string.format("-A FORWARD -i %s -o %s -p tcp -d %s --dport %s -j %s",
                            ifn_wan, ifn, r_addr, r_port, FW_ACCEPT))
                    end

                    -- XXX: Can only have one of these...
                    break
                end

The PPTP forwarding is only done on the first LAN and then the firewall bails. Is this required? Can the firewall add the relevant rules for all LANs?

Tags

No tags attached.

Attached Files

Relationships

Notes
(0013361) NickH (developer) 2020-03-04 09:48	Migrated to https://gitlab.com/clearos/clearfoundation/app-firewall/issues/24 [^]

Issue History
Date Modified	Username	Field	Change
2015-11-03 20:05	user2	New Issue
2015-11-03 20:06	user2	Status	new => confirmed
2020-03-04 09:48	NickH	Note Added: 0013361
2020-03-04 09:48	NickH	Status	confirmed => closed
2020-03-04 09:48	NickH	Resolution	open => suspended

ClearOS Bug Tracker