[Pkg-utopia-maintainers] Bug#909657: Bug#909657: firewalld: firewall rules don't work after change to nftables backend

[Michael Biebl]

Am 26.09.18 um 14:01 schrieb Pavel Kreuzt:
> Package: firewalld
> Version: 0.6.2-1
> Severity: normal
> 
> Dear Maintainer,
> 
> after upgrade to firewalld 0.6.2, in which backend changed to nftables by default, a custom script I use to enable multicast when needed stoppped working. Its content:
> 
> #!/bin/bash
> firewall-cmd --direct --add-rule ipv4 filter INPUT 0 -p igmp -j ACCEPT
> firewall-cmd --direct --add-rule ipv4 filter INPUT 0 -d 239.0.0.0/8 -j ACCEPT
> 
> It reports "success" on both commands, but IGMP is not really working. Changing firewalld backend back to iptables in /etc/firewalld/firewalld.cond makes the commands work as expected, so it seems there's a problem in nftables backend.
>  

Which kernel version do you use?


-- 
Why is it that all of the instruments seeking intelligent life in the
universe are pointed away from Earth?

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <http://alioth-lists.debian.net/pipermail/pkg-utopia-maintainers/attachments/20180926/a31b763b/attachment.sig>