Bug ID | 1099698 |
---|---|
Summary | firewalld puts icmp into ip6tables |
Classification | openSUSE |
Product | openSUSE Tumbleweed |
Version | Current |
Hardware | Other |
OS | Other |
Status | NEW |
Severity | Normal |
Priority | P5 - None |
Component | Network |
Assignee | markos.chandras@suse.com |
Reporter | jslaby@suse.com |
QA Contact | qa-bugs@suse.de |
Found By | --- |
Blocker | --- |
When I enable icmp, I see icmp in both ipv4 and ipv6 iptables:
0 0 ACCEPT icmp * * ::/0 ::/0
ctstate NEW
But icmp in ipv6 is called icmpv6. So it all does not work and the traffic is
dropped:
> [285010.162912] IN_drop_DROP: IN=eth1 OUT= MAC=d8:9e:f3:f6:6d:0c:00:14:d1:e6:8d:c6:86:dd SRC=fe80:0000:0000:0000:0214:d1ff:fee6:8dc6 DST=2a01:4240:2e27:ad85:aaaa:0000:0000:070f LEN=72 TC=0 HOPLIMIT=255 FLOWLBL=0 PROTO=ICMPv6 TYPE=135 CODE=0
And I see no way how to configure firewalld to add icmpv6 into ip6tables. I
have to use a direct rule:
firewall-cmd --permanent --direct --add-rule ipv6 filter INPUT 0 -p icmpv6 -j
ACCEPT
I would expect enabling icmp would enable icmpv6 in ip6tables, or at least
icmpv6 would be another option of protocol to be added.