Uploaded image for project: 'Modules'
  1. Modules
  2. MODULES-1355

ip6tables provider doesn't handle --sport and --dport

    XMLWordPrintable

Details

    • Bug
    • Status: Resolved
    • Normal
    • Resolution: Fixed
    • None
    • None
    • None

    Description

      Run of ip6tables provider instance method fails when ip6tables-save prints a rule with --sport or --dport.

      For instance, this rule:

      -A ufw6-before-input -s fe80::/10 -d fe80::/10 -p udp -m udp --sport 547 --dport 546 -j ACCEPT

      will print an error:

      $ sudo puppet resource --trace firewall '000-foobar' provider=ip6tables
      Error: Could not prefetch firewall provider 'ip6tables': Invalid address from IPAddr.new: 547
      /var/lib/puppet/lib/puppet/util/ipcidr.rb:12:in `rescue in initialize'
      /var/lib/puppet/lib/puppet/util/ipcidr.rb:8:in `initialize'
      /var/lib/puppet/lib/puppet/provider/firewall/iptables.rb:285:in `new'
      /var/lib/puppet/lib/puppet/provider/firewall/iptables.rb:285:in `block in rule_to_hash'
      /var/lib/puppet/lib/puppet/provider/firewall/iptables.rb:281:in `each'
      /var/lib/puppet/lib/puppet/provider/firewall/iptables.rb:281:in `rule_to_hash'
      /var/lib/puppet/lib/puppet/provider/firewall/iptables.rb:197:in `block in instances'
      /var/lib/puppet/lib/puppet/provider/firewall/iptables.rb:192:in `each'
      /var/lib/puppet/lib/puppet/provider/firewall/iptables.rb:192:in `instances'
      /var/lib/puppet/lib/puppet/provider/firewall.rb:7:in `prefetch'
      /usr/lib/ruby/vendor_ruby/puppet/transaction.rb:277:in `prefetch'
      

      Attachments

        Issue Links

          Activity

            People

              morgan Morgan Rhodes
              cataphract Gustavo Lopes
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Zendesk Support