[pve-devel] [PATCH firewall 0/1] fix #3677 ipset_get_chains fixed to work with new ipset output

Mark Yardley mgit at fragmentedpackets.net
Mon Oct 18 22:21:31 CEST 2021


As I reported in 3677, there has been a change to the output of ipset since the
update to bullseye and the introduction of ipset 7.

There are now additional items on each line which is causing the firewall to
stay in pending changes as the comparison to the applied rules never matches
despite being valid.

This patch ignores the additonal values and provides a valid line that can
be matched from the ipset output.

Mark Yardley (1):
  fix #3677 ipset_get_chains fixed to work with new ipset output

 src/PVE/Firewall.pm | 4 ++++
 1 file changed, 4 insertions(+)

-- 
2.33.0





More information about the pve-devel mailing list