Bug 1060498

Summary: default ip_forward is set to 1 and setting it to 0 is not persistent.
Product: [Fedora] Fedora Reporter: ermanojghimire
Component: iptablesAssignee: Thomas Woerner <twoerner>
Status: CLOSED NOTABUG QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: medium Docs Contact:
Priority: unspecified    
Version: 20CC: ermanojghimire, jpopelka, psabata, twoerner
Target Milestone: ---   
Target Release: ---   
Hardware: x86_64   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2014-06-17 11:10:19 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description ermanojghimire 2014-02-02 03:51:19 UTC
Description of problem:
I installed fedora 20 live CD (GNOME version), and I see that in this freshly installed Fedora the ip_forward is set to 1 in /proc/sys/net/ipv4/. Shouldn't that be set to 0 by default???. I say ok I will set it to zero now, inserted this code to this file /etc/sysctl.conf:
net.ipv4.ip_forward = 0

to enable this on the fly i hit sysctl -p /etc/sysctl.conf
and when i restart the laptop and type 
cat /proc/sys/net/ipv4/ip_forward the output is again 1. and ip_forward is again enabled.. I am really pissed off by this thing...


Version-Release number of selected component (if applicable):


How reproducible:
I don't know about others but I have installed Fedora 19 there was this problem.
I installed Fedora 20 alpha, beta there was this problem and now Fedora 20 also has this.

Steps to Reproduce:
1. Grab a Live ISO of Fedora 20. install the fresh copy. boot the computer.
2. go to the terminal and try cat /proc/sys/net/ipv4/ip_forward it has 1
3. 

Actual results:
cat /proc/sys/net/ipv4/ip_forward:
1

Expected results:
cat /proc/sys/net/ipv4/ip_forward:
0

Additional info:
and another problem. fedora still has problem displaying chars when going to serial consol by ctrl+alt+f2 and typing lsblk .

Comment 1 Jiri Popelka 2014-02-03 09:50:09 UTC
Is perhaps libvirtd enabled on your system ?
http://wiki.libvirt.org/page/Guest_can_reach_host,_but_can%27t_reach_outside_network

Comment 2 ermanojghimire 2014-06-15 04:50:47 UTC
(In reply to Jiri Popelka from comment #1)
> Is perhaps libvirtd enabled on your system ?
> http://wiki.libvirt.org/page/Guest_can_reach_host,
> _but_can%27t_reach_outside_network

it's already amended, I think it was something to do with NetworkManager and libvirtd....

Comment 3 Thomas Woerner 2014-06-17 11:10:19 UTC
Closing as NOT A BUG due to comment 2.