gufw-developers team mailing list archive

[Jamie Strandboge <jamie@xxxxxxxxxx>]

B Bobo,

RELATED,ESTABLISHED are allowed, but you won't see them just looking at the primary chains. Either do:
$ sudo iptables -L -n -v

or:
$ sudo ufw show raw # in ufw 0.27 and later

It seems what is happening is that you enabled the firewall while
network activity was happening, so the return packets are getting
dropped. The samba packets (138) should also be dropped as noisy
services. You didn't mention the ufw version (ufw --version), but in
0.30pre1 (from Lucid) you can see the rules to drop noisy samba in
/etc/ufw/after.rules.

-- 
Enabling firewall with the default rules breaks mintUpdate
https://bugs.launchpad.net/bugs/566764
You received this bug notification because you are a member of Gufw
Developers, which is the registrant for Gufw.

Status in Gufw: New
Status in The Linux Mint Distribution: Triaged
Status in ufw - Uncomplicated Firewall: New
Status in “gui-ufw” package in Ubuntu: Invalid

Bug description:
In Mint 8 Helena, enabling the firewall by clicking the Enabled button in the Firewall dialog creates a very odd set of default rules that over-cautiously blocks input packets with no allowance being made for RELATED,EXISTING connections. This is undesirable and has several consequences - for example, it completely breaks mintUpdate which can no longer receive data from Canonical's servers on port 80:

[UFW BLOCK] IN=eth0 OUT= MAC=00:29:aa:6b:13:ca:00:21:1b:52:ef:b0:a7:00 SRC=91.189.88.46 DST=192.168.50.8 LEN=40 TOS=0x00 PREC=0x00 TTL=64 ID=55764 PROTO=TCP SPT=80 DPT=32948 WINDOW=1024 RES=0x00 RST URGP=0