| 2017-02-13 07:45:46 |
Adam Ce |
bug |
|
|
added bug |
| 2017-02-13 07:45:46 |
Adam Ce |
attachment added |
|
ipv6tablesSave https://bugs.launchpad.net/bugs/1664133/+attachment/4818014/+files/ipv6tablesSave |
|
| 2017-02-13 07:47:50 |
Adam Ce |
description |
Hi,
I have the default settings from Linux Mint 18 for ufw. When I "ping6 ff02::1%wlp3s0", I get only an answer from my own ip. Duplicates from other devices on the net get filtered. It works fine after "sudo ufw disable".
ufw --version
ufw 0.35
Copyright 2008-2015 Canonical Ltd.
I've attached the output of ip6tables-save. |
Hi,
I have the default settings from Linux Mint 18 for ufw. When I "ping6 ff02::1%wlp3s0", I get only an answer from my own ip. Duplicates from other devices on the net get filtered. It works fine after "sudo ufw disable".
ufw --version
ufw 0.35
Copyright 2008-2015 Canonical Ltd.
I've attached the output of ip6tables-save.
There is a similar old and long fixed bug:
https://bugs.launchpad.net/ufw/+bug/720605 |
|
| 2018-12-14 12:53:21 |
Jamie Strandboge |
ufw: status |
New |
Triaged |
|
| 2018-12-14 14:05:17 |
Jamie Strandboge |
ufw: assignee |
|
Jamie Strandboge (jdstrand) |
|
| 2018-12-14 14:05:21 |
Jamie Strandboge |
ufw: importance |
Undecided |
Low |
|
| 2018-12-14 14:05:23 |
Jamie Strandboge |
ufw: status |
Triaged |
Fix Committed |
|
| 2018-12-14 15:26:06 |
Jamie Strandboge |
bug task added |
|
ufw (Ubuntu) |
|
| 2018-12-14 15:26:17 |
Jamie Strandboge |
nominated for series |
|
Ubuntu Disco |
|
| 2018-12-14 15:26:17 |
Jamie Strandboge |
bug task added |
|
ufw (Ubuntu Disco) |
|
| 2018-12-14 15:26:17 |
Jamie Strandboge |
nominated for series |
|
Ubuntu Bionic |
|
| 2018-12-14 15:26:17 |
Jamie Strandboge |
bug task added |
|
ufw (Ubuntu Bionic) |
|
| 2018-12-14 15:26:17 |
Jamie Strandboge |
nominated for series |
|
Ubuntu Cosmic |
|
| 2018-12-14 15:26:17 |
Jamie Strandboge |
bug task added |
|
ufw (Ubuntu Cosmic) |
|
| 2018-12-14 15:26:24 |
Jamie Strandboge |
ufw (Ubuntu Disco): status |
New |
In Progress |
|
| 2018-12-14 15:26:27 |
Jamie Strandboge |
ufw (Ubuntu Cosmic): status |
New |
Triaged |
|
| 2018-12-14 15:26:29 |
Jamie Strandboge |
ufw (Ubuntu Bionic): status |
New |
Triaged |
|
| 2018-12-14 15:26:32 |
Jamie Strandboge |
ufw (Ubuntu Bionic): importance |
Undecided |
Low |
|
| 2018-12-14 15:26:34 |
Jamie Strandboge |
ufw (Ubuntu Cosmic): importance |
Undecided |
Low |
|
| 2018-12-14 15:26:35 |
Jamie Strandboge |
ufw (Ubuntu Disco): importance |
Undecided |
Low |
|
| 2018-12-14 15:26:38 |
Jamie Strandboge |
ufw (Ubuntu Disco): assignee |
|
Jamie Strandboge (jdstrand) |
|
| 2018-12-14 15:26:40 |
Jamie Strandboge |
ufw (Ubuntu Cosmic): assignee |
|
Jamie Strandboge (jdstrand) |
|
| 2018-12-14 15:26:42 |
Jamie Strandboge |
ufw (Ubuntu Bionic): assignee |
|
Jamie Strandboge (jdstrand) |
|
| 2018-12-14 21:47:47 |
Jamie Strandboge |
ufw: status |
Fix Committed |
Fix Released |
|
| 2018-12-27 12:41:49 |
Launchpad Janitor |
ufw (Ubuntu Disco): status |
In Progress |
Fix Released |
|
| 2019-01-09 20:26:30 |
Jamie Strandboge |
description |
Hi,
I have the default settings from Linux Mint 18 for ufw. When I "ping6 ff02::1%wlp3s0", I get only an answer from my own ip. Duplicates from other devices on the net get filtered. It works fine after "sudo ufw disable".
ufw --version
ufw 0.35
Copyright 2008-2015 Canonical Ltd.
I've attached the output of ip6tables-save.
There is a similar old and long fixed bug:
https://bugs.launchpad.net/ufw/+bug/720605 |
[Impact]
ping6 replies to multicast addresses are mistakenly blocked. ufw used to have correct ordering for these replies, but 0.34 reorganized the icmp rules and reintroduced LP: #720605 (this bug). multicast ping replies are part of the ok icmp codes for INPUT (rfc4890, 4.4.1 and 4.4.2) but don't have an associated connection and are marked INVALID, so move this rule above the INVALID rules.
[Test Case]
On an IPv6 enabled system, perform a multicast ping like so:
$ sudo ufw enable
$ sudo ping6 ff02::1%wlp58s0 # where 'wlp58s0' is your network iface
PING ff02::1%wlp58s0(ff02::1%wlp58s0) 56 data bytes
64 bytes from ...addr1...: icmp_seq=1 ttl=64 time=0.081 ms
64 bytes from ...addr2...: icmp_seq=2 ttl=64 time=0.155 ms
^C
$
Without this fix, only see responses from the ff80 address of the specified interface (ie, the 'wlp58s0' interface in the above example). With the fix, there should be a response from other IPv6 enabled hosts on the network.
[Regression Potential]
The regression potential is extremely low since we are simply moving a single rule above another rule. The worst that could happen is that the ping6 would continue to not work.
= Original description =
Hi,
I have the default settings from Linux Mint 18 for ufw. When I "ping6 ff02::1%wlp3s0", I get only an answer from my own ip. Duplicates from other devices on the net get filtered. It works fine after "sudo ufw disable".
ufw --version
ufw 0.35
Copyright 2008-2015 Canonical Ltd.
I've attached the output of ip6tables-save.
There is a similar old and long fixed bug:
https://bugs.launchpad.net/ufw/+bug/720605 |
|
| 2019-01-09 23:16:32 |
Jamie Strandboge |
ufw (Ubuntu Bionic): status |
Triaged |
In Progress |
|
| 2019-01-09 23:16:35 |
Jamie Strandboge |
ufw (Ubuntu Cosmic): status |
Triaged |
In Progress |
|
| 2019-01-09 23:17:43 |
Jamie Strandboge |
bug |
|
|
added subscriber Ubuntu Stable Release Updates Team |
| 2019-03-26 22:32:54 |
Brian Murray |
ufw (Ubuntu Cosmic): status |
In Progress |
Fix Committed |
|
| 2019-03-26 22:32:58 |
Brian Murray |
bug |
|
|
added subscriber SRU Verification |
| 2019-03-26 22:33:00 |
Brian Murray |
tags |
|
verification-needed verification-needed-cosmic |
|
| 2019-03-26 22:37:41 |
Brian Murray |
ufw (Ubuntu Bionic): status |
In Progress |
Fix Committed |
|
| 2019-03-26 22:37:46 |
Brian Murray |
tags |
verification-needed verification-needed-cosmic |
verification-needed verification-needed-bionic verification-needed-cosmic |
|
| 2019-03-28 11:05:01 |
Jamie Strandboge |
tags |
verification-needed verification-needed-bionic verification-needed-cosmic |
verification-done verification-done-bionic verification-done-cosmic |
|
| 2019-04-03 13:46:47 |
Launchpad Janitor |
ufw (Ubuntu Cosmic): status |
Fix Committed |
Fix Released |
|
| 2019-04-03 13:47:03 |
Robie Basak |
removed subscriber Ubuntu Stable Release Updates Team |
|
|
|
| 2019-04-03 13:47:28 |
Launchpad Janitor |
ufw (Ubuntu Bionic): status |
Fix Committed |
Fix Released |
|
