Your message dated Wed, 20 Nov 2024 11:44:36 +0000
with message-id <[email protected]>
and subject line Bug#1087210: fixed in iptables 1.8.11-2
has caused the Debian Bug report #1087210,
regarding iptables -C returns 0 for rule that doesn't match
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1087210: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1087210
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: iptables
Version: 1.8.11-1
Severity: important
Dear Maintainer,
I have since downgraded to the trixie packages & dependencies to get myself
back up and running.
* What led up to the situation?
Upgraded my system and any Docker containers that were on a bridge network
(created with docker network create) no longer had network access beyond
localhost
* What exactly did you do (or not do) that was effective (or
ineffective)?
Downgraded to 1.8.10-4 from trixie
* What was the outcome of this action?
FORWARD rules for my created docker network were inserted after I downgraded
and restarted the docker systemd service.
* What outcome did you expect instead?
The checks to fail.
Essentially, when docker starts up, it seems to use the -C command of iptables
to check whether a rule has been inserted correctly. When I run what docker
runs manually (iptables -v --wait -t filter -C FORWARD -i br-e52603214070 -o
br-e52603214070 -j ACCEPT) with the verbose flag, it returns this rule: -A
FORWARD -i docker0 -o docker0 -j ACCEPT
-- System Information:
Debian Release: trixie/sid
APT prefers unstable
APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386
Kernel: Linux 6.11.6-amd64 (SMP w/12 CPU threads; PREEMPT)
Kernel taint flags: TAINT_USER
Locale: LANG=C, LC_CTYPE=C.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
Versions of packages iptables depends on:
ii libc6 2.40-3
ii libip4tc2 1.8.10-4+b1
ii libip6tc2 1.8.10-4+b1
ii libmnl0 1.0.5-3
ii libnetfilter-conntrack3 1.1.0-1
ii libnfnetlink0 1.0.2-3
ii libnftnl11 1.2.8-1
ii libxtables12 1.8.10-4+b1
ii netbase 6.4
Versions of packages iptables recommends:
ii nftables 1.1.1-1
Versions of packages iptables suggests:
pn firewalld <none>
ii kmod 33+20240816-2
-- no debconf information
--- End Message ---
--- Begin Message ---
Source: iptables
Source-Version: 1.8.11-2
Done: Jeremy Sowden <[email protected]>
We believe that the bug you reported is fixed in the latest version of
iptables, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Jeremy Sowden <[email protected]> (supplier of updated iptables package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Wed, 20 Nov 2024 09:03:53 +0000
Source: iptables
Architecture: source
Version: 1.8.11-2
Distribution: unstable
Urgency: medium
Maintainer: Debian Netfilter Packaging Team
<[email protected]>
Changed-By: Jeremy Sowden <[email protected]>
Closes: 1087210
Changes:
iptables (1.8.11-2) unstable; urgency=medium
.
* [91cce2c] d/patches: add patch to fix `-C` commands (Closes: #1087210)
* [3b059f3] d/t/control: update restrictions
* [d9b8a1b] d/tests: run shell test-suite
* [09bd943] d/tests: run Python test-suite
* [55d3615] d/p/translation-test-fixes.patch: add upstream commit ID
* [079426e] d/p/fix-interface-comparisons.patch: update patch to the
version committed upstream
Checksums-Sha1:
787ea9cf7660819f68142a53f5202c929bea0a87 2934 iptables_1.8.11-2.dsc
d00035c6bf18fc86ff15f5026a6fa5408106c0d2 29888 iptables_1.8.11-2.debian.tar.xz
a61b11546c69ddccfb49a73de64251781ed45f91 10006
iptables_1.8.11-2_amd64.buildinfo
Checksums-Sha256:
c58e202f7a61a8a86aec499cacc443fb1ff4cdfa781a1c3641616e38f3e1f32c 2934
iptables_1.8.11-2.dsc
59f5d10a7f95c4da660499bce38332f6d369a58863458b5fd1fb03ae1a801694 29888
iptables_1.8.11-2.debian.tar.xz
cdc7892012ce322a114d803926edb2ca07dfec6decece49e89a8750fd59ca2b0 10006
iptables_1.8.11-2_amd64.buildinfo
Files:
264911d94d37b1521afd403b6feaaf81 2934 net optional iptables_1.8.11-2.dsc
ab2b3c31b846d5739d7d9b939aef4991 29888 net optional
iptables_1.8.11-2.debian.tar.xz
09f0fde15d8120ea865b742714cd84e5 10006 net optional
iptables_1.8.11-2_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=2AEe
-----END PGP SIGNATURE-----
pgprYvr3mxsc1.pgp
Description: PGP signature
--- End Message ---
