B Bobo,

RELATED,ESTABLISHED are allowed, but you won't see them just looking at the 
primary chains. Either do:
$ sudo iptables -L -n -v

or:
$ sudo ufw show raw # in ufw 0.27 and later

It seems what is happening is that you enabled the firewall while
network activity was happening, so the return packets are getting
dropped. The samba packets (138) should also be dropped as noisy
services. You didn't mention the ufw version (ufw --version), but in
0.30pre1 (from Lucid) you can see the rules to drop noisy samba in
/etc/ufw/after.rules.

-- 
Enabling firewall with the default rules breaks mintUpdate
https://bugs.launchpad.net/bugs/566764
You received this bug notification because you are a member of Gufw
Developers, which is the registrant for Gufw.

Status in Gufw: New
Status in The Linux Mint Distribution: Triaged
Status in ufw - Uncomplicated Firewall: New
Status in “gui-ufw” package in Ubuntu: Invalid

Bug description:
In Mint 8 Helena, enabling the firewall by clicking the Enabled button in the 
Firewall dialog creates a very odd set of default rules that over-cautiously 
blocks input packets with no allowance being made for RELATED,EXISTING 
connections. This is undesirable and has several consequences - for example, it 
completely breaks mintUpdate which can no longer receive data from Canonical's 
servers on port 80:

[UFW BLOCK] IN=eth0 OUT= MAC=00:29:aa:6b:13:ca:00:21:1b:52:ef:b0:a7:00 
SRC=91.189.88.46 DST=192.168.50.8 LEN=40 TOS=0x00 PREC=0x00 TTL=64 ID=55764 
PROTO=TCP SPT=80 DPT=32948 WINDOW=1024 RES=0x00 RST URGP=0



_______________________________________________
Mailing list: https://launchpad.net/~gufw-developers
Post to     : [email protected]
Unsubscribe : https://launchpad.net/~gufw-developers
More help   : https://help.launchpad.net/ListHelp

Reply via email to