Bug#992132: [Pkg-utopia-maintainers] Bug#992132: firewalld: ipv6_rpfilter blocks wireguard traffic

[Michael Biebl]

Hi,

thanks for your offer to test the package.
It is available at
https://people.debian.org/~biebl/firewalld/

Regards,
Michael

On 01.11.21 07:12, legog...@protonmail.com wrote:

Hi Michael,

Great - and yes, willing to test a backport/fix, if it's still on the table :)

‐‐‐‐‐‐‐ Original Message ‐‐‐‐‐‐‐
On Tuesday, October 19, 2021 2:31 PM, Michael Biebl <bi...@debian.org> wrote:

Am 12.08.21 um 21:18 schrieb Lego:

Package: firewalld
Version: 0.9.3-2
Severity: important
Tags: ipv6
X-Debbugs-Cc: legog...@protonmail.com

Dear Maintainer,
The current version of firewalld breaks outbound ipv6 networking for wireguard
tunnels. More specifically, rp_filter gets applied too early, resulting
in fwmarked packets getting dropped. Reported and fixed in upstream (as
of 1.0.0).
Upstream issue: https://github.com/firewalld/firewalld/issues/603
Patch: 
https://github.com/firewalld/firewalld/commit/f250c2c507d63419a2c263f3adb47cef93613a5f

I've marked the issue as fixed in 1.0.1-1 and I'm now considering whether to 
fix this issue for stable/bullseye as well.

Would you be willing to test a backport of the above fix?
If so, I could provide test packages.

Regards,
Michael

OpenPGP_signature
Description: OpenPGP digital signature