Re: SECURITY ADVISORY: outgoing firewall accepts packets unintendedly

Re: SECURITY ADVISORY: outgoing firewall accepts packets unintendedly

[Michael Tremer]

[-- Attachment #1: Type: text/plain, Size: 331 bytes --]

Removed that unused variable.

http://git.ipfire.org/?p=people/ms/ipfire-2.x.git;a=commitdiff;h=4e2bce180421f90ab45ed71d00d2bbf902c407ee

On Thu, 2012-08-09 at 11:58 +0200, Bernhard Bitsch wrote:
> Why are there settings for chain policy? They are not used and cannot be set by 
> a iptables command, but would be useful.

SECURITY ADVISORY: outgoing firewall accepts packets unintendedly

[Michael Tremer]

[-- Attachment #1: Type: text/plain, Size: 568 bytes --]

Hello,

there is a problem in the outgoing firewall if it is used in mode 1.
Packets are accepted from blue even if there is no rule for the MAC
address of the sender.

This problem has got a medium severity and does not affect any other
configuration of the outgoing firewall and does not occur when no blue
network interface exists.

There is a fix available:
http://git.ipfire.org/?p=people/ms/ipfire-2.x.git;a=commitdiff;h=78a14abf81e61ea4fc62d313dfd6779cda9421ae

Please install and test. I am not going to repeat this request anymore.

Michael