This bug was fixed in the package ufw - 0.36-0ubuntu0.18.10.1
---
ufw (0.36-0ubuntu0.18.10.1) cosmic-proposed; urgency=medium
* Backport to cosmic addressing the following SRU bugs:
- LP: #1811129 - master SRU bug
- LP: #1664133 - before6.rules: echo-reply needs to be
This bug was fixed in the package ufw - 0.36-0ubuntu0.18.04.1
---
ufw (0.36-0ubuntu0.18.04.1) bionic-proposed; urgency=medium
* Backport to bionic addressing the following SRU bugs:
- LP: #1811129 - master SRU bug
- LP: #1664133 - before6.rules: echo-reply needs to be
The fix works as expected in B/C:
#COSMIC
ubuntu@c-ufw:~$ dpkg -l | grep ufw
ii ufw 0.36-0ubuntu0.18.10.1 all
program for managing a Netfilter firewall
ubuntu@c-ufw:~$ sudo ufw status numbered
Status: active
To
Tested this is fixed in cosmic:
$ apt-cache policy ufw
ufw:
Installed: 0.36-0ubuntu0.18.10.1
Candidate: 0.36-0ubuntu0.18.10.1
Version table:
*** 0.36-0ubuntu0.18.10.1 500
500 http://us.archive.ubuntu.com/ubuntu cosmic-proposed/main amd64
Packages
500
Verified this is fixed in bionic:
$ apt-cache policy ufw
ufw:
Installed: 0.36-0ubuntu0.18.04.1
Candidate: 0.36-0ubuntu0.18.04.1
Version table:
*** 0.36-0ubuntu0.18.04.1 500
500 http://us.archive.ubuntu.com/ubuntu bionic-proposed/main amd64
Packages
500
Hello babipanghang, or anyone else affected,
Accepted ufw into cosmic-proposed. The package will build now and be
available at
https://launchpad.net/ubuntu/+source/ufw/0.36-0ubuntu0.18.10.1 in a few
hours, and then in the -proposed repository.
Please help us by testing this new package. See
FYI, I've reuploaded 0.36 to bionic-proposed and cosmic-proposed after
updating the master bug's description.
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to ufw in Ubuntu.
https://bugs.launchpad.net/bugs/1368411
Title:
** Changed in: ufw (Ubuntu Bionic)
Status: Triaged => In Progress
** Changed in: ufw (Ubuntu Cosmic)
Status: Triaged => In Progress
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to ufw in Ubuntu.
** Description changed:
+ [Impact]
+
+ ufw's 'insert' command is designed to work with 'ufw status numbered' to
+ insert rules in specific places in the ruleset. This makes it more
+ difficult than it should be for using ufw as part of an IPS/dynamic
+ firewall (eg, fail2ban) since if the
** Changed in: ufw (Debian)
Status: New => Fix Released
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to ufw in Ubuntu.
https://bugs.launchpad.net/bugs/1368411
Title:
Cannot insert IPV6 rule before IPV4 rules
Status
This bug was fixed in the package ufw - 0.36-1
---
ufw (0.36-1) unstable; urgency=medium
* New upstream release (LP: #1782384, LP: #1664133, LP: #1509725,
LP: #1695718, LP: #1719211, LP: #1775043, LP: #1204579, LP: #1652163,
LP: #1377600, Closes: 686248, LP: #1368411, LP:
This is fixed in the new 0.36 release.
** Changed in: ufw
Status: Fix Committed => Fix Released
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to ufw in Ubuntu.
https://bugs.launchpad.net/bugs/1368411
Title:
Cannot
** Changed in: ufw
Importance: Undecided => Low
** Changed in: ufw
Importance: Low => Medium
** Changed in: ufw (Ubuntu Disco)
Status: Triaged => In Progress
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to ufw
** Changed in: ufw (Ubuntu)
Status: Confirmed => Triaged
** Changed in: ufw (Ubuntu)
Assignee: (unassigned) => Jamie Strandboge (jdstrand)
** Also affects: ufw (Ubuntu Cosmic)
Importance: Undecided
Status: New
** Also affects: ufw (Ubuntu Disco)
Importance: Medium
** Changed in: ufw
Status: In Progress => Fix Committed
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to ufw in Ubuntu.
https://bugs.launchpad.net/bugs/1368411
Title:
Cannot insert IPV6 rule before IPV4 rules
Status
Thanks for all the feedback! FYI, since '1' in ufw corresponds to the
literal rule number '1', this is going to be implemented with a new
'prepend' command. Eg:
$ sudo ufw allow 22/tcp
$ sudo ufw allow from 1.2.3.4
$ sudo ufw allow from 2001:db8::/32
$ sudo ufw status numbered
...
[1] 22/tcp
** Changed in: ufw
Status: New => In Progress
** Changed in: ufw
Assignee: (unassigned) => Jamie Strandboge (jdstrand)
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to ufw in Ubuntu.
** Changed in: ufw (Debian)
Status: Fix Released => New
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to ufw in Ubuntu.
https://bugs.launchpad.net/bugs/1368411
Title:
Cannot insert IPV6 rule before IPV4 rules
Status
** Changed in: ufw (Debian)
Status: New => Fix Released
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to ufw in Ubuntu.
https://bugs.launchpad.net/bugs/1368411
Title:
Cannot insert IPV6 rule before IPV4 rules
Status
** Changed in: ufw (Debian)
Status: Unknown => New
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to ufw in Ubuntu.
https://bugs.launchpad.net/bugs/1368411
Title:
Cannot insert IPV6 rule before IPV4 rules
Status in
** Bug watch added: Debian Bug tracker #909163
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=909163
** Also affects: ufw (Debian) via
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=909163
Importance: Unknown
Status: Unknown
--
You received this bug notification because
Attached is an updated version of the patch that builds. The previous
one was failing because there's a test case that makes sure an "insert
2" of an IPv6 rule fails. That's enforcing the existence of the behavior
that here we are arguing is a bug.
** Patch added: "Updated patch"
The attachment "0005-lp1368411.patch" seems to be a patch. If it isn't,
please remove the "patch" flag from the attachment, remove the "patch"
tag, and if you are a member of the ~ubuntu-reviewers, unsubscribe the
team.
[This is an automated message performed by a Launchpad user owned by
Taking into account the two proposed patches, and what I believe the
code to be doing, attached is a patch I believe is suitable for
inclusion.
** Patch added: "0005-lp1368411.patch"
https://bugs.launchpad.net/ubuntu/+source/ufw/+bug/1368411/+attachment/5198539/+files/0005-lp1368411.patch
--
** Tags removed: upgrade-software-version
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to ufw in Ubuntu.
https://bugs.launchpad.net/bugs/1368411
Title:
Cannot insert IPV6 rule before IPV4 rules
Status in ufw:
New
Status
That ppa can be helpful to get feedback
ppa:jdstrand/ufw-daily
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to ufw in Ubuntu.
https://bugs.launchpad.net/bugs/1368411
Title:
Cannot insert IPV6 rule before IPV4 rules
Please upgrade
https://bazaar.launchpad.net/~jdstrand/ufw/ufw-master-import/view/head:/ChangeLog?sort=date
** Tags added: artful bionic trusty upgrade-software-version xenial
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to
Over three years, actually. Coming up on four. Wow.
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to ufw in Ubuntu.
https://bugs.launchpad.net/bugs/1368411
Title:
Cannot insert IPV6 rule before IPV4 rules
Status in ufw:
Given the growing prevalence of IPv6 connectivity, this is a huge
problem for this package. This bug has been open for nearly three years.
Why is this still here?
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to ufw in Ubuntu.
** Also affects: ufw
Importance: Undecided
Status: New
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to ufw in Ubuntu.
https://bugs.launchpad.net/bugs/1368411
Title:
Cannot insert IPV6 rule before IPV4 rules
How is this still an issue?
I tried the patch with 0.35-0ubuntu2 in xenial:
+ if r.position != 0 and r.position <= num_v4:
+ r.position = num_v4 + 1
And it works perfectly. Couldn't this be merged as there is no obvious
downside on recalculating the rule position for IPv6 addresses?
--
You
** Changed in: ufw (Ubuntu)
Status: Triaged => Confirmed
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to ufw in Ubuntu.
https://bugs.launchpad.net/bugs/1368411
Title:
Cannot insert IPV6 rule before IPV4 rules
Hi Frank, your patch did not work for me. I did it this way:
--- frontend.bak2016-03-01 16:21:22.0 +0100
+++ frontend.py 2016-03-01 16:26:23.0 +0100
@@ -403,6 +403,8 @@
r.set_v6(False)
tmp = self.backend.set_rule(r)
This is my solution.
--- ufw-0.34/src/frontend.py2015-08-20 20:10:26.0 +0200
+++ ufw-0.34/src/frontend.py2015-12-21 09:46:25.311587993 +0100
@@ -451,7 +451,7 @@ class UFWFrontend:
elif ip_version == "v6":
if r.position > num_v4:
** Changed in: ufw (Ubuntu)
Status: Confirmed = Triaged
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to ufw in Ubuntu.
https://bugs.launchpad.net/bugs/1368411
Title:
Cannot insert IPV6 rule before IPV4 rules
Status
** Changed in: ufw (Ubuntu)
Status: New = Confirmed
** Changed in: ufw (Ubuntu)
Importance: Undecided = Medium
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to ufw in Ubuntu.
https://bugs.launchpad.net/bugs/1368411
36 matches
Mail list logo
