Bugzilla – Bug 1148560
susefirewall2-to-firewalld handles iptables rule in /etc/sysconfig/scripts/SuSEfirewall2-custom wrongly
Last modified: 2021-04-15 10:36:05 UTC
The below shown iptables rule is in /etc/sysconfig/scripts/SuSEfirewall2-custom mentioned in /etc/sysconfig/SuSEfirewall2 I used parameter -d with command susefirewall2-to-firewalld to find the following output: DEBUG: iptables rule: -A INPUT -s 54.38.56.123/32 -j DROP INFO: RICH: Adding rich rule="rule family=ipv4 source address=54.38.56.123/32 accept" to zone="INPUT" DEBUG: ZONE="INPUT" RICH="rule family=ipv4 source address=54.38.56.123/32 accept" INFO: Enabling rich rule="rule family=ipv4 source address=54.38.56.123/32 accept" for zone="" DEBUG: Executing: firewall-cmd --zone= --add-rich-rule=rule family=ipv4 source address=54.38.56.123/32 accept DEBUG: firewall-cmd --zone= --add-rich-rule=rule family=ipv4 source address=54.38.56.123/32 accept The iptables rule: -A INPUT -s 54.38.56.123/32 -j DROP should result in firewall-cmd --zone= --add-rich-rule='rule family=ipv4 source address=54.38.56.123/32 drop' Note accept instead of drop; quite the opposite of what should be the result.
Closed