https://bugzilla.novell.com/show_bug.cgi?id=401270 User jsuchome@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=401270#c1 Jiří­ Suchomel changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |NEEDINFO Info Provider| |locilka@novell.com --- Comment #1 from Jiří­ Suchomel 2008-06-18 06:56:14 MDT --- AFAIR there either is a open feature to enable SLP browsing though firewall or already finished one. Is that true? If yes, what API could I use from SuSEFirewall? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=401270 User locilka@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=401270#c3 --- Comment #3 from Lukas Ocilka 2008-06-19 03:15:19 MDT --- Hmm, I've checked it again. You don't need to take care about the kernel modules, SuSEFirewall does it in the Write() function, see function CheckKernelModules(). -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=401270 User locilka@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=401270#c5 --- Comment #5 from Lukas Ocilka 2008-06-19 06:46:12 MDT --- We actually can't have any temporary firewall settings, the only possibility is to change the firewall, restart it, do the search, change the firewall back and restart it again. * Export * Change Settings (SetServicesAcceptRelated) * Write * Proceed SLP Search * Import * Write This sounds like a nice idea for someone's ITO as it would probably need a new YCP module not to spoil the current (already overfilled) SuSEFirewall one with such a specific stuff. ;) Let's discuss it on YaST-devel mailing-list first... Keeping NEEDINFO on myself. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=401270 User locilka@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=401270#c7 --- Comment #7 from Lukas Ocilka 2008-06-20 08:50:30 MDT --- Created an attachment (id=223418) --> (https://bugzilla.novell.com/attachment.cgi?id=223418) YCP code According to yast-devel, no new SuSEFirewallSpecialFunctions module is going to be added. This is a special case which doesn't need to be generalized. See attached file, it should do what you want. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=401270 User jsuchome@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=401270#c8 Jiří­ Suchomel changed: What |Removed |Added ---------------------------------------------------------------------------- Status|ASSIGNED |NEEDINFO Info Provider| |locilka@novell.com --- Comment #8 from Jiří­ Suchomel 2008-06-24 08:18:42 MDT --- Nice, but it doesn't actually work. Or does it, for you? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=401270 User lnussel@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=401270#c10 Ludwig Nussel changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |lnussel@novell.com Status|NEEDINFO |ASSIGNED Info Provider|lnussel@novell.com | --- Comment #10 from Ludwig Nussel 2008-06-24 08:42:12 MDT --- What config do you expect to work exactly? Sounds like you are trying to accept RELATED slp packets. You can configure that but since there is no kernel module that actually marks them as RELATED the config has no effect in practice. nf_conntrack_netbios_ns only works for netbios aka samba. Your plans sound pretty horrible anyways. Silently adding rules that accept RELATED packets everywhere defeat the purpose of having that configurable in the first place. Rather than trying to add random holes into the firewall check the firewall settings for unprotected zones instead. If there are none (resp no interfaces configured for the unprotected zones) chances are good that SLP won't find anything. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=401270 User locilka@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=401270#c12 Lukas Ocilka changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |meissner@novell.com --- Comment #12 from Lukas Ocilka 2008-06-25 02:04:12 MDT --- Marcus has marked feature >>#301134: Configure firewall to accept bcast replies<< as a duplicate of >>#300970: Firewall support for SMB browsing<< this way: "Actually its a duplicate of 300970, which we support to some degreee in 11.0." It seems that 1.) It wasn't a duplicate 2.) The browsing functionality works for SMB only -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=401270 Jiří­ Suchomel changed: What |Removed |Added ---------------------------------------------------------------------------- AssignedTo|jsuchome@novell.com |bnc-team-screening@forge.provo.novell.com Status|ASSIGNED |NEW -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=401270 User jsuchome@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=401270#c17 Jiří­ Suchomel changed: What |Removed |Added ---------------------------------------------------------------------------- Status|ASSIGNED |RESOLVED Resolution| |FEATURE --- Comment #17 from Jiří­ Suchomel 2008-06-25 05:48:30 MDT --- feature 301134 -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.