[Pkg-utopia-maintainers] Bug#909574: Bug#909574: firewalld: FirewallBackend=nftables breaks NAT networks in libvirt

Michael Biebl biebl at debian.org
Sat Nov 10 16:00:21 GMT 2018


Hi

Am 10.11.18 um 15:47 schrieb Ralf Jung:
> According to https://bugzilla.redhat.com/show_bug.cgi?id=1638342, Fedora changed
> the default for FirewallBackend back until libvirt works with
> FirewallBackend=nftables.  Might be worth doing that in Debian as well?

I was under the impression that switching back to nftables would break
other use cases, so I'm a between a rock and a hard place, it's not even
possible to make the test-suite pass with the iptables backend.


I'd really like to get input from upstream (CCed Eric) on this matter
whether they really consider the nftables backend not ready yet.
If so, imho the best course of action would be if upstream switches the
default back.


Regards,
Michael

-- 
Why is it that all of the instruments seeking intelligent life in the
universe are pointed away from Earth?

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <http://alioth-lists.debian.net/pipermail/pkg-utopia-maintainers/attachments/20181110/6f694fcb/attachment-0001.sig>


More information about the Pkg-utopia-maintainers mailing list