View Issue Details
ID | Project | Category | View Status | Date Submitted | Last Update |
---|---|---|---|---|---|
0018041 | CentOS-8 | NetworkManager | public | 2021-01-29 09:52 | 2021-02-01 14:01 |
Reporter | 0andriy | Assigned To | |||
Priority | urgent | Severity | tweak | Reproducibility | always |
Status | new | Resolution | open | ||
Summary | 0018041: `nmcli con up ...` disrupts firewall for WiFi access point setup | ||||
Description | `nmcli con up ...` puts twice the sections of firewall into FORWARD and INPUT chains. `nmcli con down ...` *of course* removes only first group of rules, so doing up/down sequences the rules are dusrupted by enormous amount of duplicate sections. It is very annoying and adds another brick into the tomb of NM piece of... | ||||
Tags | firewall, iptables, nmcli | ||||
duplicate of | 0018044 | new | `nmcli con up ...` disrupts firewall for WiFi access point setup |
The example after doing up/down/up sequence (3 groups instead of single one): Chain FORWARD (policy ACCEPT 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 0 0 ACCEPT all -- * wlp2s0 0.0.0.0/0 10.42.0.0/24 state RELATED,ESTABLISHED 0 0 ACCEPT all -- wlp2s0 * 10.42.0.0/24 0.0.0.0/0 0 0 ACCEPT all -- wlp2s0 wlp2s0 0.0.0.0/0 0.0.0.0/0 0 0 REJECT all -- * wlp2s0 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable 0 0 REJECT all -- wlp2s0 * 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable 0 0 ACCEPT all -- * wlp2s0 0.0.0.0/0 10.42.0.0/24 state RELATED,ESTABLISHED 0 0 ACCEPT all -- wlp2s0 * 10.42.0.0/24 0.0.0.0/0 0 0 ACCEPT all -- wlp2s0 wlp2s0 0.0.0.0/0 0.0.0.0/0 0 0 REJECT all -- * wlp2s0 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable 0 0 REJECT all -- wlp2s0 * 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable 0 0 ACCEPT all -- * wlp2s0 0.0.0.0/0 10.42.0.0/24 state RELATED,ESTABLISHED 0 0 ACCEPT all -- wlp2s0 * 10.42.0.0/24 0.0.0.0/0 0 0 ACCEPT all -- wlp2s0 wlp2s0 0.0.0.0/0 0.0.0.0/0 0 0 REJECT all -- * wlp2s0 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable 0 0 REJECT all -- wlp2s0 * 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable |
|
Date Modified | Username | Field | Change |
---|---|---|---|
2021-01-29 09:52 | 0andriy | New Issue | |
2021-01-29 09:52 | 0andriy | Tag Attached: firewall | |
2021-01-29 09:52 | 0andriy | Tag Attached: iptables | |
2021-01-29 09:52 | 0andriy | Tag Attached: nmcli | |
2021-01-29 10:30 | 0andriy | Note Added: 0038210 | |
2021-02-01 14:01 | abdur | Issue cloned: 0018044 | |
2021-02-01 14:01 | abdur | Relationship added | duplicate of 0018044 |