Matthias Gerstner changed bug 954790
What Removed Added
Status NEW RESOLVED
Resolution --- INVALID

Comment # 4 on bug 954790 from
Since there was no reply I think the issue is no longer valid.

Current SuSEfirewall2 in openSUSE should allow input of IPv6 multicast
listener reports. Connection tracking for these should be implemented in the
kernel. Output of the query should always be allowed. The reports should be
allowed by means of connection tracking.

The connection tracking is setup by SuSEfirewall2 in function
allow_basic_established() by adding an iptables rule like this:

$IP6TABLES -A INPUT -j "$ACCEPT" -p icmpv6 -m conntrack --ctstate RELATED

Closing this bug as INVALID.


You are receiving this mail because: