Bug 197086 - firewall not disabled for IPv6
Summary: firewall not disabled for IPv6
Keywords:
Status: CLOSED DUPLICATE of bug 195786
Alias: None
Product: Fedora
Classification: Fedora
Component: system-config-securitylevel
Version: 6
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Chris Lumens
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2006-06-28 14:33 UTC by Jeff Bastian
Modified: 2007-11-30 22:11 UTC (History)
0 users

Fixed In Version:
Clone Of:
Environment:
Last Closed: 2006-06-28 14:44:33 UTC
Type: ---
Embargoed:


Attachments (Terms of Use)

Description Jeff Bastian 2006-06-28 14:33:23 UTC
Description of problem:
I installed fc6test1 recently and during the installation & setup I told it to
disable the firewall.  When it was finished installing, I ran
  iptables -L
  ip6tables -L
and I noticed that there were no IPv4 firewall rules (as expected), but there
were rules for IPv6.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
$ iptables -L
Chain INPUT (policy ACCEPT)
target     prot opt source               destination         

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination         

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination         
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
$ ip6tables -L
Chain INPUT (policy ACCEPT)
target     prot opt source               destination         
RH-Firewall-1-INPUT  all      anywhere             anywhere           

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination         
RH-Firewall-1-INPUT  all      anywhere             anywhere           

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination         

Chain RH-Firewall-1-INPUT (2 references)
target     prot opt source               destination         
ACCEPT     all      anywhere             anywhere           
ACCEPT     ipv6-icmp    anywhere             anywhere           
ACCEPT     ipv6-crypt    anywhere             anywhere           
ACCEPT     ipv6-auth    anywhere             anywhere           
ACCEPT     udp      anywhere             anywhere           udp dpt:ipp 
ACCEPT     tcp      anywhere             anywhere           tcp dpt:ipp 
ACCEPT     all      anywhere             anywhere           state
RELATED,ESTABLISHED 
ACCEPT     tcp      anywhere             anywhere           state NEW tcp dpt:ssh 
DROP       all      anywhere             anywhere           
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~


Version-Release number of selected component (if applicable):
firstboot-1.4.11-1

How reproducible:
Every time

Steps to Reproduce:
1. Install fc6test1
2. Choose to disable firewall during firstboot
3. Run 'ip6tables -L' after installation is finished to see the firewall is enabled
  
Actual results:
IPv6 firewall enabled

Expected results:
IPv6 firewall should be disabled

Additional info:

Comment 1 Chris Lumens 2006-06-28 14:44:33 UTC

*** This bug has been marked as a duplicate of 195786 ***


Note You need to log in before you can comment on or make changes to this bug.