Mailinglist Archive: opensuse-bugs (4197 mails)

< Previous Next >
[Bug 739084] New: SuSEfirewall2 skips rules for interfaces which don't exist at time of execution
  • From: bugzilla_noreply@xxxxxxxxxx
  • Date: Sun, 1 Jan 2012 19:31:16 +0000
  • Message-id: <bug-739084-21960@http.bugzilla.novell.com/>

https://bugzilla.novell.com/show_bug.cgi?id=739084

https://bugzilla.novell.com/show_bug.cgi?id=739084#c0


Summary: SuSEfirewall2 skips rules for interfaces which don't
exist at time of execution
Classification: openSUSE
Product: openSUSE 12.1
Version: Final
Platform: x86-64
OS/Version: SuSE Other
Status: NEW
Severity: Normal
Priority: P5 - None
Component: Other
AssignedTo: bnc-team-screening@xxxxxxxxxxxxxxxxxxxxxx
ReportedBy: dr.tino.k@xxxxxxxxx
QAContact: qa@xxxxxxx
Found By: ---
Blocker: ---


User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:8.0) Gecko/20100101
Firefox/8.0

The SuSEfirewall2 script checks if the interfaces provided in the
configuration actually exist and ignores all rules associated with it
if it doesn't. This could be a feature but is unfortunate
when an interface comes into existence after the SuSEfirewall2 script has
been executed. For example this happens with vboxnet0 which only gets
created once a user executes VirtualBox.

Temp workaround: manually restart the firewall whenever an interface gets
newly created (e.g. when executing VirtualBox) or modifying the
SuSEfirewall2 script and disabling the interface check (prob not recommended):

/sbin/SuSEfirewall2
getdevinfo()
{
local dev="$1"
echo "$dev"
return 0
}


Reproducible: Always

Steps to Reproduce:
1.
2.
3.

--
Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.

< Previous Next >