Your message dated Mon, 23 Jul 2012 23:03:12 +0000 with message-id <e1strei-0005dz...@franck.debian.org> and subject line Bug#672439: fixed in ufw 0.31.1-2 has caused the Debian Bug report #672439, regarding ufw: destroy all iptable rules on purging (breaks e.g. fail2ban) to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact ow...@bugs.debian.org immediately.) -- 672439: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=672439 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems
--- Begin Message ---Package: ufw Version: 0.31.1-1 Severity: critical Justification: breaks unrelated software -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Dear Maintainer, It seems that ufw destroys all iptable rules on purging. This breaks rules given by fail2ban package. /etc/init.d/fail2ban restart restores fail2ban filter. Note that this occurs on purging package, but I believe that breaking unrelated package should be prohibited. How to reproduce: 1. Install openssh-server and fail2ban 2. Check fail2ban filter with 'iptables -L' * fail2ban-ssh filter is present 3. Install ufw and enable it 4. Purge ufw 5. Check fail2ban filter with 'iptables -L' * fail2ban-ssh filter has gone Best regards, - -- Ryo IGARASHI, Ph.D. rigar...@gmail.com - -- System Information: Debian Release: wheezy/sid APT prefers stable-updates APT policy: (500, 'stable-updates'), (500, 'unstable'), (500, 'testing'), (500, 'stable') Architecture: amd64 (x86_64) Kernel: Linux 3.2.0-2-amd64 (SMP w/3 CPU cores) Locale: LANG=ja_JP.UTF-8, LC_CTYPE=ja_JP.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Versions of packages ufw depends on: ii debconf [debconf-2.0] 1.5.43 ii iptables 1.4.13-1.1 ii python 2.7.2-10 ii python2.7 2.7.3~rc2-2.1 ii ucf 3.0025+nmu3 ufw recommends no packages. Versions of packages ufw suggests: ii rsyslog 5.8.11-1 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iQIcBAEBCgAGBQJPrIlpAAoJEOx5ooBqGSMZbK8P/jLV+946ECzXz/j49ry7qLSf QEzwhbqd4iDPBKhyCDgO4OG+DI2YOH6AJqo8AShAlyTez/vvzm5magXBds9qM7Rr M00sG2z02R+lVWoyq5mUQgAsuAK3NTalXX2paIGNDUl0atQKRdx8PrYSYX1YComp 5q9SZjp10leDIq3ir84rphZ99871X7TWxVfKNGHpiukExdhbfBhwtE1vGQONlvTP l5FqrCAytidGGjXGXZPK3iH1/OG70BnBbxQG4Yp23xT3JZnv+W75P5tSxw1aHJ1i lrBiVjLMInljfAjZyIwK4v//kb1/ljqRWfeI9XnJKgxNXERXxLYyghiLBeI3sofJ Il74aVQZ9BM1ho6mS6rtqFTnj3XJA5OFXo/RbZ5kn3aoKCQMDiZUg7CrrLjukA+c O0kz9ELEXagiWctGfQ7e/J+/0wxHZr3Lve4cKXCQS2YROwJARv+L8VUhejJWXKb1 +nUjGoJUydiH9CVRdZ54osU6jwOf87RrdtPpLq9mrom0xNKe9Lj2IgTY5d3nZ0lk M+rOM/qB+LNgSy/DbmeRt4eLbWWhqSDl0tpheit/c2550DUwFGEiGGOEQzqrajYj 9Lebwb8/kw0cDUrN5Rno8BOIzDBQGkXh3X4hFgkpS5ZPaUh1XbFdYXJgO/Jz2d7L i8Yyja84lYxMbHqXJinq =939U -----END PGP SIGNATURE-----
--- End Message ---
--- Begin Message ---Source: ufw Source-Version: 0.31.1-2 We believe that the bug you reported is fixed in the latest version of ufw, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 672...@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Jamie Strandboge <ja...@ubuntu.com> (supplier of updated ufw package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmas...@debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 20 Jul 2012 15:05:39 -0500 Source: ufw Binary: ufw Architecture: source all Version: 0.31.1-2 Distribution: unstable Urgency: low Maintainer: Jamie Strandboge <ja...@ubuntu.com> Changed-By: Jamie Strandboge <ja...@ubuntu.com> Description: ufw - program for managing a Netfilter firewall Closes: 672439 Changes: ufw (0.31.1-2) unstable; urgency=low . * Simplify unload of firewall and play nicely with other firewall tools by using ufw-init instead of iptables directly. 'ufw-init stop' by design leaves a few empty chains around, but they won't get in the way of anything and are gone after the next reboot. Using upstream's ufw-init has the important benefit of always cleaning what it needs. (Closes: 672439). - debian/prerm: call '/lib/ufw/ufw-init stop' on removal - debian/postrm: don't flush the chains on purge Checksums-Sha1: 5d6a453ba7b5efce99f4fd117583a128cf120288 1900 ufw_0.31.1-2.dsc 24ef30290736afbe0529f20273cadcbd95da6286 30288 ufw_0.31.1-2.debian.tar.gz 82886d1c1492f8f682cf7c5e23e077293fb785b6 165504 ufw_0.31.1-2_all.deb Checksums-Sha256: 9fcf5dabefbb5242fdbd00afcf4786b73f0d3bd1a094ef0f752e3b3b7023c119 1900 ufw_0.31.1-2.dsc cfc0269c55b916d739452d97c65b609582ae7bb46e534708c7cb85ee5528a03d 30288 ufw_0.31.1-2.debian.tar.gz 102eb7e0075d4893e1990139d2b8cda597bff15028735ef59c0cba1cf071f2fa 165504 ufw_0.31.1-2_all.deb Files: f431aef86731cd4ef493c24e218332b9 1900 admin optional ufw_0.31.1-2.dsc 4caff6aa8481110f03c94e88ec3cd041 30288 admin optional ufw_0.31.1-2.debian.tar.gz 74f0bb16e865c643425cbf43cb1a6508 165504 admin optional ufw_0.31.1-2_all.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) Comment: Kees Cook <k...@outflux.net> iQIcBAEBCgAGBQJQDdceAAoJEIly9N/cbcAm0OAP/RrO6Hdu9EkEOkUT+7B0oTp/ NREAWWc37zuzAXQrRkzYIBB1l++Uh8aYo6Q5LwDXIcW/dyqncP8pVhqz6K2p43If 2zsMnWnmM554/pixoFXwZ20ck+mO3KMZcptqEal1nBqehUvdQzHhOD5h9Ci4Rkkk lRw+CRQdxOUOOChpCyFRojBcSzPrZI/5YVYkOxDPbTkNdclbrAlBQgaEajIYeQF7 PaNYWvOsitmhxghU+yb2rD+D7ic2k+NMjuaS1IdvQTp7GZjqgT/Fm5Rwq1pkVDPl Ie2a0Isiq/NJ/ZH9WjZuzSbRj91E1uPppuCIch6dHGzPjspVo+aj09Qc3uinCgJj /kbAJUcFWftSM+Jq6BZA7LOaCNCtNbeYZxdpmxjmcyk1S2hvC1GhqkZnM0psYHGh zfMQY3vuKUBw7pOjC5PA2wJKvbDG/7xydoSvKUHjBB7MhnLAModznn3PLqfK7Yow f0jWKDtdOK9KdhVXb7Lr/y3VtjKet4MHN46dTBY+g7ywDhYm6J1NtQsjgAFCEN7i IpyfZHrj6Pqnkq//Cc9azyPG3mYJYYOwDcf+1EZqYmW2zp5E3bsk76g3ie4vd1Fi Z20vN6Kv8Qfubm3Kfab64UMUnlhrauMb4E7Utu7qdnsN+4P8Vr+kBzjQ73odi1Pd iB3rnwxcGLy35QuPUiud =6I/2 -----END PGP SIGNATURE-----
--- End Message ---
