Opened 13 months ago

Closed 13 months ago

#578 closed defect (fixed)

PR-QBS chain is sometimes not set in firewallvm

Reported by: joanna Owned by: marmarek
Priority: major Milestone: Release 1
Component: core Keywords:
Cc:

Description

This seems to happen when there is no networking connection when firewallvm is starting (so typically when the system boots). Once the networking has been established (in the netvm) and after I restarted the firewallvm, the PR-QBS was filled correctly now.

Change History (4)

comment:1 Changed 13 months ago by marmarek

Cannot reproduce... Can you send systemctl output and interesing parts of /var/log/messages (grep 'firewall\|iptables')?

comment:2 Changed 13 months ago by joanna

Seems like qubes-network.service and qubes-firewall.service are missing "After=iptables" directive.

comment:3 Changed 13 months ago by marmarek

  • Owner changed from joanna to marmarek
  • Status changed from new to accepted

comment:4 Changed 13 months ago by marmarek

  • Resolution set to fixed
  • Status changed from accepted to closed

​http://git.qubes-os.org/gitweb/?p=marmarek/core.git;a=commit;h=c5c916b74cd47f16b939305ef3f470c1ec076868

Note: See TracTickets for help on using tickets.