Public bug reported:

libvirt recently had a security upgrade. Every time the package has an
upgrade it re-installs firewall rules with means all my VMs loose
Internet connectivity.

After upgrade:
nafallo@pony:~$ sudo iptables -vnL
Chain INPUT (policy ACCEPT 3943M packets, 2378G bytes)
 pkts bytes target     prot opt in     out     source               destination 
        
    0     0 ACCEPT     udp  --  bklabs *       0.0.0.0/0            0.0.0.0/0   
        udp dpt:53 
    0     0 ACCEPT     tcp  --  bklabs *       0.0.0.0/0            0.0.0.0/0   
        tcp dpt:53 
    0     0 ACCEPT     udp  --  bklabs *       0.0.0.0/0            0.0.0.0/0   
        udp dpt:67 
    0     0 ACCEPT     tcp  --  bklabs *       0.0.0.0/0            0.0.0.0/0   
        tcp dpt:67 

Chain FORWARD (policy ACCEPT 14G packets, 11T bytes)
 pkts bytes target     prot opt in     out     source               destination 
        
    0     0 ACCEPT     all  --  *      bklabs  0.0.0.0/0            91.194.67.9 
        
    0     0 ACCEPT     all  --  bklabs *       91.194.67.9          0.0.0.0/0   
        
   38  3992 ACCEPT     all  --  bklabs bklabs  0.0.0.0/0            0.0.0.0/0   
        
  367 34537 REJECT     all  --  *      bklabs  0.0.0.0/0            0.0.0.0/0   
        reject-with icmp-port-unreachable 
  271 17023 REJECT     all  --  bklabs *       0.0.0.0/0            0.0.0.0/0   
        reject-with icmp-port-unreachable 

Chain OUTPUT (policy ACCEPT 2317M packets, 1709G bytes)
 pkts bytes target     prot opt in     out     source               destination

Fix: nafallo@pony:~$ sudo iptables -F

My setup is not the default, but I'm bored of having the package
upgrades break my setup.

** Affects: libvirt (Ubuntu)
     Importance: High
         Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to libvirt in Ubuntu.
https://bugs.launchpad.net/bugs/746497

Title:
  libvirt installs firewall rules on package upgrades

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

Reply via email to