Question about the bugfix #12265 in core 160

Security Firewall Rules
1

Hello firewall friends.

In the newest release note we can read that the bug #12265 has been fixed.

How does this bugfix interfere with our existing firewall rules and is there somehow running a migration during the upgrade to core 160 ?

Regards, Marc

2

So THIS is why DNS from Orange to IPfire never worked. :stuck_out_tongue_winking_eye:

@mroland : non-working rules from Orange should now be working. :wink: Iptables chains are built from the config in /var/ipfire/firewall/config, so a rebuild should be triggered by the upgrade script I guess. So saved but non-applied chains possibly get activated after an upgrade.

3

Hi,

first of all, I updated the aforementioned bug so it now contains the correct commit link and release notes. :slight_smile:

Second, I am using DNS for ORANGE for years, and it always worked fine by creating a firewall rule permitting DNS traffic from ORANGE to the ORANGE interface of IPFire.

However, it is good to have that bug fixed by now. An automatic migration of firewall rules is not possible.

Thanks, and best regards,
Peter Müller