PacketFence - BTS - PacketFence
View Issue Details
IDProjectCategoryView StatusDate SubmittedLast Update
0001269PacketFenceconfigurationpublic2011-09-15 13:422011-09-21 22:16
Reporterfgaudreault 
Assigned Toobilodeau 
PriorityhighSeverityminorReproducibilityalways
StatusclosedResolutionfixed 
PlatformOSOS Version
Product Versiondevel 
Target VersionFixed in Version3.0.0 
fixed in git revision
fixed in mtn revision6bb7cedc16341ea992237686c956d05690035bb3
Summary0001269: iptables not starting if having more than 1 DNS server in the config - inline mode
DescriptionLooks like the comma-separated DNS server list is creating an error in iptables.

In the generated config :

:FORWARD DROP [0:0]
:forward-internal-inline-if - [0:0]
-A forward-internal-inline-if --protocol udp --destination 4.2.2.2,4.2.2.1 --destination-port 53 --jump ACCEPT
-A forward-internal-inline-if --match mark --mark 0x1 --jump ACCEPT

In pf.conf :
# general.dnsservers
#
# Comma-delimited list of DNS servers. Passthroughs are created to allow queries to these servers from even "trapped" nodes.
dnsservers=4.2.2.2,4.2.2.1
Steps To Reproduce
Additional Information
TagsNo tags attached.
Relationships
has duplicate 0001271closed obilodeau IPTables rules not enough strong in registration/isolation VLAN 
Attached Files
Issue History
Date ModifiedUsernameFieldChange
2011-09-15 13:42fgaudreaultNew Issue
2011-09-15 13:42fgaudreaultDescription Updated
2011-09-19 13:09obilodeauStatusnew => assigned
2011-09-19 13:09obilodeauAssigned To => obilodeau
2011-09-19 13:49obilodeaumtn revision => 6bb7cedc16341ea992237686c956d05690035bb3
2011-09-19 13:49obilodeauNote Added: 0002215
2011-09-19 13:49obilodeauStatusassigned => resolved
2011-09-19 13:49obilodeauFixed in Version => trunk
2011-09-19 13:49obilodeauResolutionopen => fixed
2011-09-19 14:23obilodeauRelationship addedhas duplicate 0001271
2011-09-21 22:07obilodeauFixed in Versiontrunk => 3.0.0
2011-09-21 22:15obilodeauNote Added: 0002231
2011-09-21 22:16obilodeauStatusresolved => closed

Notes
(0002215)
obilodeau   
2011-09-19 13:49   
fix committed
- multi DNS support splitting on , (fixing this issue)
- not injecting DNS passthrough for other network than inline
(0002231)
obilodeau   
2011-09-21 22:15   
fix released in 3.0