Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > linux.debian.kernel > #55306
| From | Ben Hutchings <ben@decadent.org.uk> |
|---|---|
| Newsgroups | linux.debian.bugs.dist, linux.debian.kernel |
| Subject | Bug#839671: linux-image-4.7.0-1-amd64: NEWS should document conntrack policy changes |
| Date | 2016-10-03 22:10 +0200 |
| Message-ID | <sohIJ-123-3@gated-at.bofh.it> (permalink) |
| References | <sohIK-123-21@gated-at.bofh.it> <sofdT-7SG-13@gated-at.bofh.it> |
| Organization | linux.* mail to news gateway |
Cross-posted to 2 groups.
[Multipart message — attachments visible in raw view] - view raw
Control: forcemerge 839632 -1 On Mon, 2016-10-03 at 13:24 -0400, Matthew Gabeler-Lee wrote: > Package: src:linux > Version: 4.7.5-1 > Severity: normal > > The 4.7 kernel seems to have MASSIVELY changed how firewalls are allowed to > use conntrack modules by default, rendering many common firewall > configurations invalid in significant ways. > > This should be called out in the NEWS (possibly conditional on having some > common firewall tools installed or something?) so that administrators are > not caught by surprise. [...] The kernel has warned about reliance on auto-loading conntrack helpers since 3.5, so this should not be surprising. Ben. -- Ben Hutchings Horngren's Observation: Among economists, the real world is often a special case.
Back to linux.debian.kernel | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread
Bug#839671: linux-image-4.7.0-1-amd64: NEWS should document conntrack policy changes Matthew Gabeler-Lee <cheetah@fastcat.org> - 2016-10-03 19:30 +0200
Processed: Re: Bug#839671: linux-image-4.7.0-1-amd64: NEWS should document conntrack policy changes owner@bugs.debian.org (Debian Bug Tracking System) - 2016-10-03 22:10 +0200
Bug#839671: linux-image-4.7.0-1-amd64: NEWS should document conntrack policy changes Ben Hutchings <ben@decadent.org.uk> - 2016-10-03 22:10 +0200
Bug#839671: linux-image-4.7.0-1-amd64: NEWS should document conntrack policy changes Matthew Gabeler-Lee <cheetah@fastcat.org> - 2016-10-04 14:40 +0200
csiph-web