Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Allow generation of stateless rules on firewall generated with optimal ruleset #475

Open
mhanor opened this issue Apr 25, 2022 · 0 comments

Comments

@mhanor
Copy link

mhanor commented Apr 25, 2022

Hello,
This is a continuation of remaining issues mentioned in #372
It is sometimes useful to be able to generate a firewall with optimal ruleset, to apply it on a small device. The current functionality is that the stateless rules are dropped for the optimal ruleset. While for icmpv6 protocol this was addressed, for dhcp and dhcpv6 services it was not. There's also the FIXME for anystateless, where it is mentioned that the rules might be added as untracked rules on the raw table.

I've made a small modification to firehol (see this commit), to allow it to generate the rules needed for dhcp and dhcpv6 services, while the anystateless issue remains unaddressed. I don't know why the anystateless rules can't be added just like they are added on the accurate firewall, but I don't need them, so I have not attempted to make any modifications here. The dhcp rule seem to work in my case, on the optimal ruleset.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant