Uploaded image for project: 'Red Hat OpenStack Services on OpenShift'
  1. Red Hat OpenStack Services on OpenShift
  2. OSPRH-15158

Since nftables switch, input policy is ACCEPT instead of DROP up until nftables services is reloaded or server is rebooted

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Done-Errata
    • Icon: Normal Normal
    • rhos-17.1.8
    • None
    • tripleo-ansible
    • None
    • 8
    • False
    • Hide

      None

      Show
      None
    • False
    • ?
    • tripleo-ansible-3.3.1-17.1.20250702110757.8debef3.el9ost
    • rhos-ops-day1day2-edpm
    • None
    • EDPM Sprint 3
    • 1
    • Important

      Since nftables switch, input policy is ACCEPT instead of DROP up until nftables service is reloaded or server is rebooted.  

      This is the difference between nft list ruleset before and after restarting nftables.

      @@ -1,6 +1,6 @@
 table inet filter {
        chain INPUT {
-               type filter hook input priority filter; policy accept;
+               type filter hook input priority filter; policy drop;
                jump TRIPLEO_INPUT
         }

       

      RHOSP17.1.4

              jslagle@redhat.com James Slagle
              rhn-support-dhill Dave Hill
              rhos-dfg-df
              Votes:
              0 Vote for this issue
              Watchers:
              7 Start watching this issue

                Created:
                Updated:
                Resolved: