0001269: iptables not starting if having more than 1 DNS server in the config - inline mode - PacketFence

Bug Tracking System

View Issue Details [ Jump to Notes ]

[ Issue History ] [ Print ]

Project

Category

View Status

Date Submitted

Last Update

0001269

PacketFence

configuration

public

2011-09-15 13:42

2011-09-21 22:16

Reporter

fgaudreault

Assigned To

obilodeau

Priority

high

Severity

minor

Reproducibility

always

Status

closed

Resolution

fixed

Platform

OS Version

Product Version

devel

Target Version

Fixed in Version

3.0.0

Summary

0001269: iptables not starting if having more than 1 DNS server in the config - inline mode

Description

Looks like the comma-separated DNS server list is creating an error in iptables.

In the generated config :

:FORWARD DROP [0:0]
:forward-internal-inline-if - [0:0]
-A forward-internal-inline-if --protocol udp --destination 4.2.2.2,4.2.2.1 --destination-port 53 --jump ACCEPT
-A forward-internal-inline-if --match mark --mark 0x1 --jump ACCEPT

In pf.conf :
# general.dnsservers
#
# Comma-delimited list of DNS servers. Passthroughs are created to allow queries to these servers from even "trapped" nodes.
dnsservers=4.2.2.2,4.2.2.1

Tags

No tags attached.

fixed in git revision

fixed in mtn revision

6bb7cedc16341ea992237686c956d05690035bb3

Attached Files

Relationships

has duplicate

0001271

closed

obilodeau

IPTables rules not enough strong in registration/isolation VLAN

Notes
(0002215) obilodeau (reporter) 2011-09-19 13:49	fix committed - multi DNS support splitting on , (fixing this issue) - not injecting DNS passthrough for other network than inline

(0002231) obilodeau (reporter) 2011-09-21 22:15	fix released in 3.0

Issue History
Date Modified	Username	Field	Change
2011-09-15 13:42	fgaudreault	New Issue
2011-09-15 13:42	fgaudreault	Description Updated
2011-09-19 13:09	obilodeau	Status	new => assigned
2011-09-19 13:09	obilodeau	Assigned To	=> obilodeau
2011-09-19 13:49	obilodeau	mtn revision	=> 6bb7cedc16341ea992237686c956d05690035bb3
2011-09-19 13:49	obilodeau	Note Added: 0002215
2011-09-19 13:49	obilodeau	Status	assigned => resolved
2011-09-19 13:49	obilodeau	Fixed in Version	=> trunk
2011-09-19 13:49	obilodeau	Resolution	open => fixed
2011-09-19 14:23	obilodeau	Relationship added	has duplicate 0001271
2011-09-21 22:07	obilodeau	Fixed in Version	trunk => 3.0.0
2011-09-21 22:15	obilodeau	Note Added: 0002231
2011-09-21 22:16	obilodeau	Status	resolved => closed