gufw-developers team mailing list archive

[Clement Lefebvre <root@xxxxxxxxxxxxx>]

Marking as upstream (in doubt about whether to chose ufw or gufw.. not
sure whether it's the GUI setting these default policies or not).

** Also affects: gui-ufw (Ubuntu)
   Importance: Undecided
       Status: New

** Changed in: linuxmint
       Status: New => Triaged

-- 
Enabling firewall with the default rules breaks mintUpdate
https://bugs.launchpad.net/bugs/566764
You received this bug notification because you are a member of Gufw
Developers, which is subscribed to gui-ufw in ubuntu.

Status in The Linux Mint Distribution: Triaged
Status in “gui-ufw” package in Ubuntu: New

Bug description:
In Mint 8 Helena, enabling the firewall by clicking the Enabled button in the Firewall dialog creates a very odd set of default rules that over-cautiously blocks input packets with no allowance being made for RELATED,EXISTING connections. This is undesirable and has several consequences - for example, it completely breaks mintUpdate which can no longer receive data from Canonical's servers on port 80:

[UFW BLOCK] IN=eth0 OUT= MAC=00:29:aa:6b:13:ca:00:21:1b:52:ef:b0:a7:00 SRC=91.189.88.46 DST=192.168.50.8 LEN=40 TOS=0x00 PREC=0x00 TTL=64 ID=55764 PROTO=TCP SPT=80 DPT=32948 WINDOW=1024 RES=0x00 RST URGP=0