FEDORA-2016-8d90406113

enhancement update in Fedora 25 for firewalld

Status: obsolete

Support Recognition of Automatic Helper Assignment Setting

Automatic helper assignment has been disabled in kernel 4.7. firewalld version 0.4.4 is now able to recognize this and to create rules if automatic helper assignment has been turned off to make conntrack helpers work again. If automatic helper assignment is turned on, then firewalld will behave as before.

For more information about the use of netfilter conntrack helper, please have a look at http://www.firewalld.org/2016/10/automatic-helper-assignment

Firewall-applet is now using Qt5

The firewall applet has been ported from Qt4 to Qt5.

Fixes LogDenied for zone reject targets

The logging rules for LogDenied have been placed after the reject rules for zones using the reject targets. The logging rules are now placed before these reject rules to fix logging.

Does not abort transaction on failed ipv6_rpfilter rules

The existing transaction will be executed before trying to add the rules for ipv6_rpfilter and a new transaction will be used to apply the ipv6_rpfiler rules. If this transaction fails, a warning is printed out and the remaining rules are applied with the next transaction.

Enhancements for the command line tools

The command line tools are now more consistent with errors and error codes in sequence options. The NOT_AUTHORIZED error is now also working.

New services

The services cfengine, condor-collector and smtp-submission have been added.

firewall-config: Use proper source check in sourceDialog (issue #162)

firewallctl: Use sys.excepthook to force exception_handler usage always

firewallctl: Support helpers

Several other enhancements and fixes

Comments 84

This update has been submitted for testing by twoerner.

This update has been pushed to testing.

I installed

firewall-applet-0.4.4.1-1.fc25.noarch.rpm firewall-config-0.4.4.1-1.fc25.noarch.rpm firewalld-0.4.4.1-1.fc25.noarch.rpm firewalld-filesystem-0.4.4.1-1.fc25.noarch.rpm python3-firewall-0.4.4.1-1.fc25.noarch.rpm python-firewall-0.4.4.1-1.fc25.noarch.rpm on a system with

[root@acer ~]# uname -r 4.8.6-300.fc25.x86_64

I am unable to ftp to this system.

[egreshko@meimei ~]$ ftp acer ftp: connect: No route to host ftp> quit

Bringing up firewall-config and trying to unset/set the ftp service I get the error message.

INVALID_HELPER: 'nf_conntrack_ftp' not available in kernel

karma: -1

Works great! LGTM! =)

karma: +1

no regressions noted

karma: +1

Seems good

karma: +1

This update has reached the stable karma threshold and can be pushed to stable now if the maintainer wishes.

This update has reached the stable karma threshold and can be pushed to stable now if the maintainer wishes.

This update has reached the stable karma threshold and can be pushed to stable now if the maintainer wishes.

This update has reached the stable karma threshold and can be pushed to stable now if the maintainer wishes.

This update has reached the stable karma threshold and can be pushed to stable now if the maintainer wishes.

looks fine

karma: +1

This update has reached the stable karma threshold and can be pushed to stable now if the maintainer wishes.

This update has reached the stable karma threshold and can be pushed to stable now if the maintainer wishes.

wfm

karma: +1

This update has reached the stable karma threshold and can be pushed to stable now if the maintainer wishes.

  • Works for me.
karma: +1

This update has reached the stable karma threshold and can be pushed to stable now if the maintainer wishes.

This update has reached the stable karma threshold and can be pushed to stable now if the maintainer wishes.

This update has reached the stable karma threshold and can be pushed to stable now if the maintainer wishes.

This update has reached the stable karma threshold and can be pushed to stable now if the maintainer wishes.

This update has reached the stable karma threshold and can be pushed to stable now if the maintainer wishes.

This update has reached the stable karma threshold and can be pushed to stable now if the maintainer wishes.

This update has reached the stable karma threshold and can be pushed to stable now if the maintainer wishes.

This update has reached the stable karma threshold and can be pushed to stable now if the maintainer wishes.

This update has reached the stable karma threshold and can be pushed to stable now if the maintainer wishes.

This update has reached the stable karma threshold and can be pushed to stable now if the maintainer wishes.

This update has reached the stable karma threshold and can be pushed to stable now if the maintainer wishes.

This update has reached the stable karma threshold and can be pushed to stable now if the maintainer wishes.

This update has reached the stable karma threshold and can be pushed to stable now if the maintainer wishes.

This update has reached the stable karma threshold and can be pushed to stable now if the maintainer wishes.

This update has reached the stable karma threshold and can be pushed to stable now if the maintainer wishes.

no issues spotted

karma: +1

This update has reached the stable karma threshold and can be pushed to stable now if the maintainer wishes.

works

karma: +1

Looks good to me.

karma: +1 critpath: +1

This update has reached the stable karma threshold and can be pushed to stable now if the maintainer wishes.

This update has reached the stable karma threshold and can be pushed to stable now if the maintainer wishes.

This update has reached the stable karma threshold and can be pushed to stable now if the maintainer wishes.

This update has reached the stable karma threshold and can be pushed to stable now if the maintainer wishes.

This update has reached the stable karma threshold and can be pushed to stable now if the maintainer wishes.

This update has reached the stable karma threshold and can be pushed to stable now if the maintainer wishes.

no regression noted in daily use

karma: +1

This update has reached the stable karma threshold and can be pushed to stable now if the maintainer wishes.

This update has reached the stable karma threshold and can be pushed to stable now if the maintainer wishes.

works for me

karma: +1

This update has reached the stable karma threshold and can be pushed to stable now if the maintainer wishes.

This update has reached the stable karma threshold and can be pushed to stable now if the maintainer wishes.

looks good,no regression noted

karma: +1

This update has reached the stable karma threshold and can be pushed to stable now if the maintainer wishes.

Look Good to Me

karma: +1

This update has reached the stable karma threshold and can be pushed to stable now if the maintainer wishes.

@twoerner, can you push to stable for F24->f25 upgrades?

This update has reached the stable karma threshold and can be pushed to stable now if the maintainer wishes.

This update has reached the stable karma threshold and can be pushed to stable now if the maintainer wishes.

This update has reached the stable karma threshold and can be pushed to stable now if the maintainer wishes.

This update has reached the stable karma threshold and can be pushed to stable now if the maintainer wishes.

This update has reached the stable karma threshold and can be pushed to stable now if the maintainer wishes.

This update has reached the stable karma threshold and can be pushed to stable now if the maintainer wishes.

This update has reached the stable karma threshold and can be pushed to stable now if the maintainer wishes.

This update has reached the stable karma threshold and can be pushed to stable now if the maintainer wishes.

This update has reached the stable karma threshold and can be pushed to stable now if the maintainer wishes.

This update has reached the stable karma threshold and can be pushed to stable now if the maintainer wishes.

This update has reached the stable karma threshold and can be pushed to stable now if the maintainer wishes.

This update has reached the stable karma threshold and can be pushed to stable now if the maintainer wishes.

This update has reached the stable karma threshold and can be pushed to stable now if the maintainer wishes.

This update has reached the stable karma threshold and can be pushed to stable now if the maintainer wishes.

This update has reached the stable karma threshold and can be pushed to stable now if the maintainer wishes.

This update has reached the stable karma threshold and can be pushed to stable now if the maintainer wishes.

This update has reached the stable karma threshold and can be pushed to stable now if the maintainer wishes.

This update has reached the stable karma threshold and can be pushed to stable now if the maintainer wishes.

This update has reached the stable karma threshold and can be pushed to stable now if the maintainer wishes.

It works great for me!

karma: +1 critpath: +1 #1390961: +1 #1380168: +1 #1297235: +1

This update has reached the stable karma threshold and can be pushed to stable now if the maintainer wishes.

This update has reached the stable karma threshold and can be pushed to stable now if the maintainer wishes.

This update has reached the stable karma threshold and can be pushed to stable now if the maintainer wishes.

This update has reached the stable karma threshold and can be pushed to stable now if the maintainer wishes.

This update has reached the stable karma threshold and can be pushed to stable now if the maintainer wishes.

Works for me

karma: +1

This update has reached the stable karma threshold and can be pushed to stable now if the maintainer wishes.

This update has reached the stable karma threshold and can be pushed to stable now if the maintainer wishes.

This update has reached the stable karma threshold and can be pushed to stable now if the maintainer wishes.

This update has been obsoleted by firewalld-0.4.4.2-1.fc25.

Add Comment & Feedback

Please login to add feedback.

Content Type
RPM
Status
obsolete
Test Gating
Submitted by
Update Type
enhancement
Update Severity
medium
Karma
+14
stable threshold: 3
unstable threshold: -3
Autopush (karma)
Disabled
Autopush (time)
Disabled
Dates
submitted 2 years ago
in testing 2 years ago

Related Bugs 3

0+1 #1297235 samba browsing blocked even with the samba-client service enabled, works with connection/interface in 'trusted' zone
0+1 #1380168 Firewalld cause any ftp client to get "host unknown" when go in passive mode connecting with ip address
0+1 #1390961 firewalld does not allow connections to VPN PPTP server

Automated Test Results