Bug 197086 - firewall not disabled for IPv6
firewall not disabled for IPv6
Status: CLOSED DUPLICATE of bug 195786
Product: Fedora
Classification: Fedora
Component: system-config-securitylevel (Show other bugs)
6
All Linux
medium Severity medium
: ---
: ---
Assigned To: Chris Lumens
:
Depends On:
Blocks:
  Show dependency treegraph
 
Reported: 2006-06-28 10:33 EDT by Jeff Bastian
Modified: 2007-11-30 17:11 EST (History)
0 users

See Also:
Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of:
Environment:
Last Closed: 2006-06-28 10:44:33 EDT
Type: ---
Regression: ---
Mount Type: ---
Documentation: ---
CRM:
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---


Attachments (Terms of Use)

  None (edit)
Description Jeff Bastian 2006-06-28 10:33:23 EDT
Description of problem:
I installed fc6test1 recently and during the installation & setup I told it to
disable the firewall.  When it was finished installing, I ran
  iptables -L
  ip6tables -L
and I noticed that there were no IPv4 firewall rules (as expected), but there
were rules for IPv6.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
$ iptables -L
Chain INPUT (policy ACCEPT)
target     prot opt source               destination         

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination         

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination         
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
$ ip6tables -L
Chain INPUT (policy ACCEPT)
target     prot opt source               destination         
RH-Firewall-1-INPUT  all      anywhere             anywhere           

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination         
RH-Firewall-1-INPUT  all      anywhere             anywhere           

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination         

Chain RH-Firewall-1-INPUT (2 references)
target     prot opt source               destination         
ACCEPT     all      anywhere             anywhere           
ACCEPT     ipv6-icmp    anywhere             anywhere           
ACCEPT     ipv6-crypt    anywhere             anywhere           
ACCEPT     ipv6-auth    anywhere             anywhere           
ACCEPT     udp      anywhere             anywhere           udp dpt:ipp 
ACCEPT     tcp      anywhere             anywhere           tcp dpt:ipp 
ACCEPT     all      anywhere             anywhere           state
RELATED,ESTABLISHED 
ACCEPT     tcp      anywhere             anywhere           state NEW tcp dpt:ssh 
DROP       all      anywhere             anywhere           
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~


Version-Release number of selected component (if applicable):
firstboot-1.4.11-1

How reproducible:
Every time

Steps to Reproduce:
1. Install fc6test1
2. Choose to disable firewall during firstboot
3. Run 'ip6tables -L' after installation is finished to see the firewall is enabled
  
Actual results:
IPv6 firewall enabled

Expected results:
IPv6 firewall should be disabled

Additional info:
Comment 1 Chris Lumens 2006-06-28 10:44:33 EDT

*** This bug has been marked as a duplicate of 195786 ***

Note You need to log in before you can comment on or make changes to this bug.