https://bugzilla.novell.com/show_bug.cgi?id=800592 https://bugzilla.novell.com/show_bug.cgi?id=800592#c1 Marcus Meissner changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |meissner@suse.com AssignedTo|bnc-team-screening@forge.pr |yast2-maintainers@suse.de |ovo.novell.com | --- Comment #1 from Marcus Meissner 2013-01-26 10:00:57 UTC --- what other ports are open? assigbn to yast team -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=800592 https://bugzilla.novell.com/show_bug.cgi?id=800592#c Thomas Göttlicher changed: What |Removed |Added ---------------------------------------------------------------------------- Priority|P5 - None |P4 - Low CC| |tgoettlicher@suse.com AssignedTo|yast2-maintainers@suse.de |tgoettlicher@suse.com -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=800592 https://bugzilla.novell.com/show_bug.cgi?id=800592#c4 Thomas Fehr changed: What |Removed |Added ---------------------------------------------------------------------------- AssignedTo|yast2-maintainers@suse.de |locilka@suse.com --- Comment #4 from Thomas Fehr 2013-03-12 10:43:05 UTC --- Reassign to Lukas to decide what to do about bugs for unmaintained modules. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=800592 https://bugzilla.novell.com/show_bug.cgi?id=800592#c6 --- Comment #6 from James Knott 2013-05-02 15:19:02 UTC --- Perhaps I should clarify. This problem is on a Linux box that's used as a router/firewall for both IPv4 and IPv6. This means the firewall has to filter for both access to itself and forwarding to the network. The standard filters work OK for access to the firewall itself, but there is no way to use the graphical interface to manage IPv6 forwarding. I had to manually edit /etc/sysconfig/SuSEfirewall2 to a) route my IPv6 subnet and b) allow only the services I wanted. Here is what I had to add to it. FW_FORWARD="2001:x:y:z::/56,2000::/3 \ 2000::/3,2001:x:y:z::/56,tcp,imaps \ 2000::/3,2001:x:y:z::/56,tcp,ssh" This forwards from my network to the Interent and forwards from the Internet to my network, allowing only ssh and imaps. I have changed the actual addresses. So, it's not a case of misconfiguration, but rather not being able to use the Yast Firewall tool to configure for IPv6 routing. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=800592 https://bugzilla.novell.com/show_bug.cgi?id=800592#c7 Lukas Ocilka changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |ASSIGNED --- Comment #7 from Lukas Ocilka 2013-05-03 08:52:38 UTC --- Than it's definitely YaST Configuration issue. It doesn't allow adding special IPv6 rules. According to comment #2 it rather seemed to be issue in SuSEfirewall2 itself. Comment #6 clarifies the workflow. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=800592 https://bugzilla.novell.com/show_bug.cgi?id=800592#c8 Lukas Ocilka changed: What |Removed |Added ---------------------------------------------------------------------------- Status|ASSIGNED |NEEDINFO InfoProvider| |james.knott@rogers.com --- Comment #8 from Lukas Ocilka 2013-05-07 11:04:04 UTC --- Should be fixed in these two packages (both are needed): yast2-2.23.25 yast2-firewall-2.24.0 https://build.opensuse.org/package/binaries?package=yast2-firewall&project=YaST%3AHead&repository=openSUSE_12.3 https://build.opensuse.org/package/binaries?package=yast2&project=YaST%3AHead&repository=openSUSE_12.3 James, can you test whether it fulfills your needs? If not, please describe what and where you want to do. Thanks in advance. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=800592 https://bugzilla.novell.com/show_bug.cgi?id=800592#c10 --- Comment #10 from James Knott 2013-05-07 12:15:42 UTC --- Will those packages work with 11.4? That's what my firewall is currently running. Another thing that should be looked at is dhcp6 server support. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=800592 https://bugzilla.novell.com/show_bug.cgi?id=800592#c12 --- Comment #12 from James Knott 2013-05-07 13:47:51 UTC --- I try to keep my firewall as stable as possible, so I guess I'll wait for the next Evergreen version. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=800592 https://bugzilla.novell.com/show_bug.cgi?id=800592#c14 --- Comment #14 from Thomas Göttlicher 2013-05-08 07:00:30 UTC --- (In reply to comment #13)

I just set up a test 12.3 system to try those updates on. I enabled that repository and a lot of things updated, but now Yast2 is unusable. I get an error:

terminate called after throwing an instance of 'YUIPluginException' what(): Couldn't load plug-in qt YaST got signal 6 at YCP file Wizard.ycp:720 /sbin/yast2: line 431: 1654 Aborted $ybindir/y2base $module "$@" "$SELECTED_GUI" $Y2_GEOMETRY $Y2UI_ARGS

If you update yast packages from 11.4 to 12.3 you also need to install the libyui packages for 12.3. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=800592 https://bugzilla.novell.com/show_bug.cgi?id=800592#c16 --- Comment #16 from Lukas Ocilka 2013-05-09 08:53:44 UTC --- (In reply to comment #14)

If you update yast packages from 11.4 to 12.3 you also need to install the libyui packages for 12.3.

Thomas, it sounds like we are missing some dependencies expressed in yast2 or libyui. Some 'Requires' / 'Conflicts' might help... -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=800592 https://bugzilla.novell.com/show_bug.cgi?id=800592#c19 Lukas Ocilka changed: What |Removed |Added ---------------------------------------------------------------------------- Status|ASSIGNED |RESOLVED Resolution| |FIXED --- Comment #19 from Lukas Ocilka 2013-11-11 12:58:56 UTC --- Fixed according to comment #8 -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.