Opened 8 years ago
Last modified 2 years ago
#147 new defect
iptables rules not removed after network deletion
Reported by: | mfedv | Owned by: | Victor Julien |
---|---|---|---|
Priority: | minor | Milestone: | |
Component: | suite | Version: | 0.8rc1 |
Keywords: | network deletion | Cc: |
Description
when a network definition is deleted entirely in vuurmuur_conf, the corresponding iptables rules remain after "Apply changes" (F11). If I just unset the "Active" flag, the rules are deleted correctly on "Apply changes".
In this example I had 2 networks, 192.168.248.0/24 and 192.168.249.0/24 in zone "Server", and an SNAT rule for all traffic originating from that zone.
iptables -t nat -nL POSTROUTING: Chain POSTROUTING (policy ACCEPT) target prot opt source destination PRE-VRMR-POSTROUTING all -- 0.0.0.0/0 0.0.0.0/0 NFLOG all -- 192.168.249.0/24 0.0.0.0/0 limit: avg 20/sec burst 40 nflog-prefix "vrmr: SNAT srv " nflog-group 9 SNAT all -- 192.168.249.0/24 0.0.0.0/0 to:10.110.110.92 NFLOG all -- 192.168.248.0/24 0.0.0.0/0 limit: avg 20/sec burst 40 nflog-prefix "vrmr: SNAT srv " nflog-group 9 SNAT all -- 192.168.248.0/24 0.0.0.0/0 to:10.110.110.92
After deleting the network definition for 192.168.248.0/24 and pressing F11 for "Apply changes", the rules for 192.168.248.0/24 stay in place:
Chain POSTROUTING (policy ACCEPT) target prot opt source destination PRE-VRMR-POSTROUTING all -- 0.0.0.0/0 0.0.0.0/0 NFLOG all -- 192.168.249.0/24 0.0.0.0/0 limit: avg 20/sec burst 40 nflog-prefix "vrmr: SNAT srv " nflog-group 9 SNAT all -- 192.168.249.0/24 0.0.0.0/0 to:10.110.110.92 NFLOG all -- 192.168.248.0/24 0.0.0.0/0 limit: avg 20/sec burst 40 nflog-prefix "vrmr: SNAT srv " nflog-group 9 SNAT all -- 192.168.248.0/24 0.0.0.0/0 to:10.110.110.92
but after /etc/init.d/vuurmuur restart the rules are correct: Chain POSTROUTING (policy ACCEPT) target prot opt source destination PRE-VRMR-POSTROUTING all -- 0.0.0.0/0 0.0.0.0/0 NFLOG all -- 192.168.249.0/24 0.0.0.0/0 limit: avg 20/sec burst 40 nflog-prefix "vrmr: SNAT srv " nflog-group 9 SNAT all -- 192.168.249.0/24 0.0.0.0/0 to:10.110.110.92
Change History (2)
comment:1 by , 8 years ago
Milestone: | undecided → 0.8 |
---|
comment:2 by , 2 years ago
Milestone: | 0.8 |
---|