Attachment 875051 Details for Bug 1074427 – Trying IPv6_rpfilter=no

Trying IPv6_rpfilter=no

firewall-report-2.txt (text/plain), 1.57 KB, created by Mitch Davis on 2014-03-16 04:47:38 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Mitch Davis

Created: 2014-03-16 04:47:38 UTC

Size: 1.57 KB

patch

obsolete

>[root@green ~]# rpm -q firewalld
>firewalld-0.3.9.3-1.fc19.noarch
>[root@green ~]# > /var/log/firewalld 
>[root@green ~]# cat /etc/firewalld/firewalld.conf
># firewalld config file
>
># default zone
># The default zone used if an empty zone string is used.
># Default: public
>DefaultZone=public
>
># Minimal mark
># Marks up to this minimum are free for use for example in the direct 
># interface. If more free marks are needed, increase the minimum
># Default: 100
>MinimalMark=100
>
># Clean up on exit
># If set to no or false the firewall configuration will not get cleaned up
># on exit or stop of firewalld
># Default: yes
>CleanupOnExit=yes
>
># Lockdown
># If set to enabled, firewall changes with the D-Bus interface will be limited
># to applications that are listed in the lockdown whitelist.
># The lockdown whitelist file is lockdown-whitelist.xml
># Default: no
>Lockdown=no
>
># IPv6_rpfilter
># Performs a reverse path filter test on a packet for IPv6. If a reply to the
># packet would be sent via the same interface that the packet arrived on, the 
># packet will match and be accepted, otherwise dropped.
># The rp_filter for IPv4 is controlled using sysctl.
># Default: yes
>IPv6_rpfilter=yes
>[root@green ~]# systemctl restart firewalld
>[root@green ~]# firewall-cmd --state
>not running
>[root@green ~]# cat /var/log/firewalld 
>[root@green ~]# sed -i -e 's/^$IPv6_rpfilter=$yes$/\1no/' /etc/firewalld/firewalld.conf
>[root@green ~]# grep IPv6_rpfilter /etc/firewalld/firewalld.conf
># IPv6_rpfilter
>IPv6_rpfilter=no
>[root@green ~]# systemctl restart firewalld
>[root@green ~]# firewall-cmd --state
>running
>[root@green ~]# 
>

Actions: View

Attachments on bug 1074427: 873264 | 873265 | 875039 | 875051