Comment 1 for bug 262421

Revision history for this message
Jamie Strandboge (jdstrand) wrote : Re: Requesting configuration file permissions

This needs to be handled in the ufw package, and ultimately in the ufw command itself. At this time ufw does not support manipulating the ufw-user-forward chain at all, so providing an interface in the ufw command that allows just changing the forward policy could be confusing for users. Additionally, you would clearly also want to adjust /etc/ufw/sysctl.conf, but this is problematic because it includes both ipv4 and ipv6 settings, so you would need to be careful about the treatment of ipv6. Supporting FORWARDing generally in ufw may be implemented in the future, but will require significant planning, and is well beyond inclusion in Intrepid. I do find the your apparent use of the forwarding chains at this time somewhat puzzling, as again, it is not supported in the ufw command itself.

All that said, I will review/accept patches to ufw. The best approach at this time likely will be to provide a script that would simply adjust this setting (with a corresponding man page). Keep in mind that these changes will require a FFe as detailed in https://wiki.ubuntu.com/FreezeExceptionProcess.