[pve-devel] applied: [PATCH firewall] fix #4175: ignore non-filter ebtables tables

Thomas Lamprecht t.lamprecht at proxmox.com
Mon Aug 29 14:32:03 CEST 2022


Am 27/07/2022 um 15:07 schrieb Fabian Grünbichler:
> we only ever add rules to the filter table, without this we'd add all
> rules from other tables (which might have been manually filled by the
> admin) to the filter table as well - adding another copy on every
> iteration of the firewall update cycle!
> 
> note that ebtables-restore seems to flush tables contained in its input,
> but leave those alone which are not referenced at all.
> 
> Signed-off-by: Fabian Grünbichler <f.gruenbichler at proxmox.com>
> ---
> still waiting on OP to report whether there is yet another issue
> observed which is unrelated to ebtables - but this (wrong) behaviour I
> can reproduce, and it is fixed with this patch ;)
> 
>  src/PVE/Firewall.pm | 8 ++++++++
>  1 file changed, 8 insertions(+)
> 
>

applied, thanks!





More information about the pve-devel mailing list