FS#70491 - [firewalld] ipset appears broken in latest release

Attached to Project: Community Packages
Opened by BH (braderhart) - Saturday, 17 April 2021, 21:18 GMT
Last edited by Maxime Gauduin (Alucryd) - Sunday, 18 April 2021, 07:05 GMT
Task Type Bug Report
Category Packages
Status Closed
Assigned To Maxime Gauduin (Alucryd)
Architecture All
Severity High
Priority Normal
Reported Version
Due in Version Undecided
Due Date Undecided
Percent Complete 100%
Votes 0
Private No

Details

Description:


Additional info:
* 0.9.3-2
* In latest build ipset is not working. Possibly built without support.
* https://bbs.archlinux.org/viewtopic.php?id=265585

Steps to reproduce:

Install latest firewalld and run command:

sudo firewall-cmd --get-ipset-types
This task depends upon

Closed by  Maxime Gauduin (Alucryd)
Sunday, 18 April 2021, 07:05 GMT
Reason for closing:  Fixed
Additional comments about closing:  0.9.3-3
Comment by Maxime Gauduin (Alucryd) - Sunday, 18 April 2021, 07:05 GMT
Arch Linux will be dropping legacy netfilter stuff very soon, starting with ebtables and arptables [0]. ipset will surely follow suit and users are higly encouraged to move to nftables. See [1] for a migration guide.

I temporarily reactivated ipset support, but it will be dropped again when the legacy stuff is dropped.

[0] https://lists.archlinux.org/pipermail/arch-dev-public/2020-December/030231.html
[1] https://wiki.nftables.org/wiki-nftables/index.php/Moving_from_ipset_to_nftables

Loading...