Your message dated Sat, 02 Jan 2016 21:51:23 +0000 with message-id <[email protected]> and subject line Bug#749790: fixed in iptables-persistent 1.0.4 has caused the Debian Bug report #749790, regarding iptables-persistent: init.d script flush option deletes rules before setting chain policy to ACCEPT. to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact [email protected] immediately.) -- 749790: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=749790 Debian Bug Tracking System Contact [email protected] with problems
--- Begin Message ---Package: iptables-persistent Version: 0.5.7 Severity: normal Dear Maintainer, *** Please consider answering these questions, where appropriate *** * What led up to the situation? I used the 'flush' option (/etc/init.d/iptables-persistent flush). * What exactly did you do (or not do) that was effective (or ineffective)? effective: rearranged the order of iptables commands in the script. * What was the outcome of this action? Works fine now. * What outcome did you expect instead? to work fine already. flush_rules() drops rules first before setting policy to ACCEPT. I think you need to set policy to ACCEPT before flushing rules. failed eg: for param in F Z X; do /sbin/iptables -$param; done for table in $(cat /proc/net/ip_tables_names) do /sbin/iptables -t $table -F /sbin/iptables -t $table -Z /sbin/iptables -t $table -X done for chain in INPUT FORWARD OUTPUT do /sbin/iptables -P $chain ACCEPT done working eg: for chain in INPUT FORWARD OUTPUT do /sbin/iptables -P $chain ACCEPT done for param in F Z X; do /sbin/iptables -$param; done for table in $(cat /proc/net/ip_tables_names) do /sbin/iptables -t $table -F /sbin/iptables -t $table -Z /sbin/iptables -t $table -X done *** End of the template - remove these lines *** -- System Information: Debian Release: 7.5 APT prefers stable APT policy: (500, 'stable') Architecture: amd64 (x86_64) Kernel: Linux 3.2.0-4-amd64 (SMP w/2 CPU cores) Locale: LANG=en_CA.UTF-8, LC_CTYPE=en_CA.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash
--- End Message ---
--- Begin Message ---Source: iptables-persistent Source-Version: 1.0.4 We believe that the bug you reported is fixed in the latest version of iptables-persistent, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to [email protected], and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Jonathan Wiltshire <[email protected]> (supplier of updated iptables-persistent package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing [email protected]) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Sat, 02 Jan 2016 19:45:51 +0000 Source: iptables-persistent Binary: netfilter-persistent iptables-persistent Architecture: source all Version: 1.0.4 Distribution: unstable Urgency: medium Maintainer: Jonathan Wiltshire <[email protected]> Changed-By: Jonathan Wiltshire <[email protected]> Description: iptables-persistent - boot-time loader for netfilter rules, iptables plugin netfilter-persistent - boot-time loader for netfilter configuration Closes: 749790 764645 766940 780407 807285 Changes: iptables-persistent (1.0.4) unstable; urgency=medium . * [d52b9e] During flush, set policy before flushing rules (Closes: #749790) * [5d962d] Suggest iptables-persistent (Closes: #766940) * [379050] Stop rules files being world-readable. Thanks to Bernhard Thaler (Closes: #764645) * [110c78] Rewrite README, install for both packages (Closes: #807285) * [c2f464] Remove Andreas from uploads - thanks for your contributions! * [e5ea0b] Update VCS links * [b9c096] Weaken systemd dependency on systemd-modules-load.service (Closes: #780407) Checksums-Sha1: 473171dd2f558a8f2af7766e718d44f16ab60b0c 1702 iptables-persistent_1.0.4.dsc 10e6bb14ed169efe9980e8dc966d80e85b557638 13664 iptables-persistent_1.0.4.tar.xz d212c85c546b7badb9a9ab7fafa8f2b3dd5b3e41 10430 iptables-persistent_1.0.4_all.deb 967b03ef96b1381c96220197b0bddea9328d36ed 8466 netfilter-persistent_1.0.4_all.deb Checksums-Sha256: be0873eba84d417a9ae9c0317734017e93deab7baae445f2deadeab0598a2d8a 1702 iptables-persistent_1.0.4.dsc 236c7b1699ba6377d1bd452e8cf0c15a845ba87bb21391edfdc10063b5c0d9ca 13664 iptables-persistent_1.0.4.tar.xz 9c6b90de4b40939edc17c20bd2abbc8f7b8d4417dca8d93ed26617673b1d7feb 10430 iptables-persistent_1.0.4_all.deb 7fe7e813481166d09c48b32e3c3bea6b5fbf783ed0e8911e71c58ebc881638f1 8466 netfilter-persistent_1.0.4_all.deb Files: 67d756021ff966954c6f7f2f9689f133 1702 admin optional iptables-persistent_1.0.4.dsc d7a4f269b37c944f460c47d77f181580 13664 admin optional iptables-persistent_1.0.4.tar.xz ed900702b824df16cc27f1d58784ba1f 10430 admin optional iptables-persistent_1.0.4_all.deb 498fbb90578053d5f7288365032bd499 8466 admin optional netfilter-persistent_1.0.4_all.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQIcBAEBCAAGBQJWiCuAAAoJEGN9Nzz68Z6gb/MQAK+XYbFTHtKMgT32sC+j6QYn 6WKX3/g9qVpRTfc1BPLPFalNgNH3F3h7k1Egk2UspMlEdD92Rc1ZPDZBJsK/8KII UmWsXTqT1wNl1A8OASV5+ndzvH7RUPR9nEuwiJ2NKvseGbnZ1F6jM1/8+vVSTiew yHKX9zg4nIEfjKsZUKu/rC0E1T49lRuRU5nlY/Bkf6oSd1itv3nFoRQwGaldCirA lTM/X9vMVnzBtciQ7yW100Qgy9UwdtEJrSZUn1nbV7IpDXaFNwYhFh/YvfTJFy/w yoeoa0e9S7U6sp/Dwmawo3OFUxNzGf2mlg2UFrMHZv3M/PlCRFhMRn6WnpmT2JA7 Sf6iHiXSF0U9GX954VnVl3JJbyzMtFOdgxtZcGbz1ACAlt48SiaWaRO5dsDabiPO 8juwX7d/n05Hx0XXXrpGTszPfNFC43LOjgsl+PdphABLWiRj5XO/RES6IoFmNAz7 t24WzmalK7wz8a+RgMcKu/3eru/BjdHb53o6YLBvwJkz6M2tFPe4BSliOwDNzYH/ 0cL2c+TEcc0nWr9PN2k3Beeiwkyy67rO/165yxArjA6iTjjtSYhJHXBg45uP6+JI dOeazYjzX5pp8dRD3EakYWwudh/1BmdN620W9t3HVYwLIJNuRgow5swbykXzWrxP bIowdkn6fmQkkXyWYvL7 =M+fy -----END PGP SIGNATURE-----
--- End Message ---
