Re: [suse-security] Bug in Susefirewall FW_ALLOW_INCOMING_HIGHPORTS_UDP

Frank Stuehmer wrote:

just tried to use fresh installed Suse 9.3 updated with you.

SuSEfirewall2-3.3-18.2

/etc/sysconfig/SuSEfirewall2 with FW_ALLOW_INCOMING_HIGHPORTS_UDP="yes"

Start FW complains, four lines "iptables: No chain/target/match by that name"

Reasons are in /sbin/SuSEfirewall lines 1460 and 1469: for CHAIN in $input_zones; do --> chain=input_$chain

should be "CHAIN=input_$CHAIN".

Thanks for the report. I've prepared an update, it will take a bit until it appears in YOU though. Btw, what's your use case for this variable? I was actually thinking about dropping it. cu Ludwig -- (o_ Ludwig Nussel //\ SUSE LINUX Products GmbH, Development V_/_ http://www.suse.de/