Comments (6)
kiorky
commented on May 18, 2024
Im wondering if the second rules is not mising --state RELATED,ESTABLISHED
from firewalld.
t-woerner
commented on May 18, 2024
The conntrack match for established and related is there already in the FORWARD chain and therefore not needed here. But it is lacking an additional "-m conntrack --ctstate NEW".
I will push a new patch for verification.
from firewalld.
t-woerner
commented on May 18, 2024
But on the other hand INVALID is also dropped early in the FORWARD chain (since 354dcab again), therefore the rule can only be hit by connections that are in NEW state.
from firewalld.
t-woerner
commented on May 18, 2024
Fixed in 36ccd63
from firewalld.
kiorky
commented on May 18, 2024
can we grab rich-masquerading-destination back to master ?
from firewalld.
kiorky
commented on May 18, 2024
thx ! merged, closing
from firewalld.
Related Issues (20)
- Various test suite failure on Debian sid HOT 5
- Firewalld is blocking Network/Samba Client in KDE/Dolphin HOT 4
- Firewalld 2.0: Error from removeSource Call HOT 9
- Doc: Include better explainations of the effects various configurations (i.e. what does the setting do?)
- ipset: config checks should verify that the number of elements does not exceed ipset size
- firewall-config doesn't show policy objects
- Render, but don't apply, rules - for debugging
- In rocky8, I have a question about firewall. Can't iptables command see firewall rules? HOT 4
- Preserve source IP when using masquerade + rich-rule port-forwading
- Policy and IPv6 HOT 3
- Add port forwarding to firewalld doesn't take effect actually HOT 3
- Applet icon missing in the tray but randomly appears after relog HOT 3
- Add SCTP for DLM
- --runtime-to-permanent removing public zone from active zones HOT 2
- Should `https.xml` include `http3.xml`? HOT 1
- Bug in `wrong_args_for_callable()` causes firewall-applet to crash (regression introduced in 2.1.0) HOT 1
- rework D-Bus bindings and move away from deprecated python-dbus
- Disruptive remnants of firewalld.service remain after removal HOT 3
- Non compacted IPv6 address conflict after reload HOT 1
- Unfriendly error message with `firewall-cmd --load-zone-defaults` without customization.
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from firewalld.