Package: miniupnpd-nftables
Version: 2.3.7-1
Severity: grave
Justification: renders package unusable

Dear Maintainer,

miniupnpd stopped working so I had another poke at it--the nft_init.sh script 
opens with a check
to see if $TABLE exists in nft rules, but $TABLE is defined as filter in 
miniupnpd_functions.sh

This will always fail the check because the filter table is where everything 
goes so anybody who's
using nftables for anything will have it already.

Not sure why it's broken now because I don't think any of these files have 
changed recently but
it sure is.

I commented that check out and miniupnpd seems to work again (or at least it 
runs and adds chains
to nftables).

-- System Information:
Debian Release: trixie/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)

Kernel: Linux 6.12.3-amd64 (SMP w/4 CPU threads; PREEMPT)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages miniupnpd-nftables depends on:
ii  libc6       2.40-4
ii  libmnl0     1.0.5-3
ii  libnftnl11  1.2.8-1
ii  miniupnpd   2.3.7-1

miniupnpd-nftables recommends no packages.

miniupnpd-nftables suggests no packages.

-- Configuration Files:
/etc/miniupnpd/nft_init.sh changed:
. "$(dirname "$0")/miniupnpd_functions.sh"
echo "Creating nftables structure"
cat > /tmp/miniupnpd.nft <<EOF
table inet $TABLE {
    chain forward {
        type filter hook forward priority 0;
        policy accept;
        # miniupnpd
        jump $CHAIN
        # Add other rules here
    }
    # miniupnpd
    chain $CHAIN {
    }
EOF
if [ "$TABLE" != "$NAT_TABLE" ]
then
cat >> /tmp/miniupnpd.nft <<EOF
}
table inet $NAT_TABLE {
EOF
fi
cat >> /tmp/miniupnpd.nft <<EOF
    chain prerouting {
        type nat hook prerouting priority -100;
        policy accept;
        # miniupnpd
        jump $PREROUTING_CHAIN
        # Add other rules here
    }
    chain postrouting {
        type nat hook postrouting priority 100;
        policy accept;
        # miniupnpd
        jump $POSTROUTING_CHAIN
        # Add other rules here
    }
    chain $PREROUTING_CHAIN {
    }
    chain $POSTROUTING_CHAIN {
    }
}
EOF
$NFT -f /tmp/miniupnpd.nft


-- no debconf information

Reply via email to