Bug 1924

Summary:	ipfwadm 2.3.0 does not allow ICMP masquerading
Product:	[Retired] Red Hat Linux	Reporter:	dlarson
Component:	distribution	Assignee:	Cristian Gafton <gafton>
Status:	CLOSED WONTFIX	QA Contact:
Severity:	high	Docs Contact:
Priority:	high
Version:	5.2	CC:	mas-hatada
Target Milestone:	---
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	1999-07-02 20:52:04 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description dlarson 1999-04-01 03:26:15 UTC

This worked in previous versions od ipfwadm.


See:

	http://www.xos.nl/linux/ipfwadm/versions.html


Dan Larson
Network Computer Inc.

Comment 1 Cristian Gafton 1999-07-02 20:52:59 UTC

ipfwadm does not handle that. period.

Ipchains takes care of the problem, if one needs icmp masq the it can
do a --rebuild for the ipchains src.rpm from rawhide.ipfwadm does not handle that. period.

Ipchains takes care of the problem, if one needs icmp masq the it can
do a --rebuild for the ipchains src.rpm from rawhide.

Comment 2 Masaki Hatada 2021-01-14 08:40:00 UTC

Dear Red Hat,

We are currently avoiding this issue by applying the following MachineConfig.
Could Red Hat incorporate it as an official fix?

apiVersion: machineconfiguration.openshift.io/v1
kind: MachineConfig
metadata:
  labels:
    machineconfiguration.openshift.io/role: master
  name: 98-logrotate-master
spec:
  config:
    ignition:
      version: 3.1.0
    systemd:
      units:
      - contents: |
          [Unit]
          Description=Daily Log Rotation Timer
          [Timer]
          OnCalendar=daily
          AccuracySec=1h
          [Install]
          WantedBy=multi-user.target
        enabled: true
        name: logrotate.timer
      - contents: |
          [Unit]
          Description=Log Rotation
          [Service]
          Type=oneshot
          ExecStart=/usr/sbin/logrotate -v /etc/logrotate.conf
          [Install]
          WantedBy=multi-user.target
        enabled: true
        name: logrotate.service