[Bug 284998] New: Yast firewall custom rules stores source as dest port - openSUSE Bugs - openSUSE Mailing Lists

newer
[Bug 286179] New: sd_mod isn't...

[Bug 284998] New: Yast firewall custom rules stores source as dest port

older
[Bug 288552] New: Is it intended...

bugzilla_noreply＠novell.com

17 Jun 2007 17 Jun '07

09:56

https://bugzilla.novell.com/show_bug.cgi?id=284998 Summary: Yast firewall custom rules stores source as dest port Product: openSUSE 10.3 Version: Alpha 5 Platform: Other OS/Version: Other Status: NEW Severity: Normal Priority: P5 - None Component: YaST2 AssignedTo: bnc-team-screening@forge.provo.novell.com ReportedBy: volker3204@paradise.net.nz QAContact: jsrain@novell.com Found By: Beta-Customer Yast->Security and Users->Firewall->Custom rules->Add The destination and source ports are both optional. When entering a source port but no destination port, the source port which is entered is stored as destination port. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

Show replies by date

bugzilla_noreply＠novell.com

20 Jun 20 Jun

15:45

New subject: [Bug 284998] Yast firewall custom rules stores source as dest port

https://bugzilla.novell.com/show_bug.cgi?id=284998#c1 Cyril Hrubis changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |NEEDINFO Info Provider| |volker3204@paradise.net.nz --- Comment #1 from Cyril Hrubis 2007-06-20 09:45:01 MST --- Please attach y2logs. If you are in doubt follow: http://en.opensuse.org/Bugs/YaST Thanks! -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

24 Jun 24 Jun

01:12

New subject: [Bug 284998] Yast firewall custom rules stores source as dest port

https://bugzilla.novell.com/show_bug.cgi?id=284998#c2 Volker Kuhlmann changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEEDINFO |NEW Info Provider|volker3204@paradise.net.nz | --- Comment #2 from Volker Kuhlmann 2007-06-23 19:12:12 MST --- No problem. I've cleared out /var/log/YaST2 to get rid of the installation junk, and added a custom rule to allow 10.1.1.0/24 tcp *source* port 999 in on the external zone. Immediately after entering those numbers in the popup, the advanced rule window shows the rule with *dest* port 999. Seems like a trivial thing to me: there are 2 optional arguments, dest port and source port. If only the second one is given, it is treated as if it was the first. Btw making the first optional argument mandatory when entering the second optional one doesn't work here, they have to be independently optional. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

01:14

New subject: [Bug 284998] Yast firewall custom rules stores source as dest port

https://bugzilla.novell.com/show_bug.cgi?id=284998#c3 --- Comment #3 from Volker Kuhlmann 2007-06-23 19:14:19 MST --- Created an attachment (id=148073) --> (https://bugzilla.novell.com/attachment.cgi?id=148073) yast logs of entering a custom rule with optional source port argument -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

2 Jul 2 Jul

09:29

New subject: [Bug 284998] Yast firewall custom rules stores source as dest port

https://bugzilla.novell.com/show_bug.cgi?id=284998 Jiri Dluhos changed: What |Removed |Added ---------------------------------------------------------------------------- AssignedTo|bnc-team- |locilka@novell.com |screening@forge.provo.novell| |.com | -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

13:18

New subject: [Bug 284998] Yast firewall custom rules stores source as dest port

https://bugzilla.novell.com/show_bug.cgi?id=284998#c4 Lukas Ocilka changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution| |FIXED --- Comment #4 from Lukas Ocilka 2007-07-02 07:18:16 MST --- A patch: Index: SuSEFirewallExpertRules.ycp =================================================================== --- SuSEFirewallExpertRules.ycp (revision 39103) +++ SuSEFirewallExpertRules.ycp (working copy) @@ -244,8 +244,17 @@ // Creating new record string new_rule = params["network"]:"" + "," + params["protocol"]:""; - if (params["dport"]:"" != "") new_rule = new_rule + "," + params["dport"]:""; - if (params["sport"]:"" != "") new_rule = new_rule + "," + params["sport"]:""; + + // either 'dport' or 'sport' + if (params["dport"]:"" != "" || params["sport"]:"" != "") { + // 'dport' can be empty even if 'sport' is set + new_rule = new_rule + "," + params["dport"]:""; + + if (params["sport"]:"" != "") { + new_rule = new_rule + "," + params["sport"]:""; + } + } + if (new_rule == "0/0,all") { y2warning("Adding rule '%1' that allows everything from all networks!", new_rule); } Fixed in yast2-2.15.38 -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

6149

Age (days ago)

6164

Last active (days ago)

Download

5 comments

1 participants

tags

participants (1)

bugzilla_noreply＠novell.com