#5197 Centos7 - Connection State Edit or Add Problems

[Antonio Pedro Santos]

Good Morning Sirs.

I'm using Centos7 - CentOS Linux release 7.5.1804 ; With Webmin 1.890 ;

Operating system CentOS Linux 7.5.1804
Webmin version 1.890
Theme version Authentic Theme 19.20-beta4
Kernel and CPU Linux 3.10.0-862.11.6.el7.x86_64 on x86_64

I'm having trouble adding and showing Connection State info in Firewall module (iptabled 4 & 6);

The issue is that I can't add new rules with a configured State, and when I change existing rules the State is not shown;

My config ipv4 (ipv6 is the same):

# sample configuration for iptables service
# you can edit this manually or use system-config-firewall
# please do not ask us to add additional ports/services to this default configuration
*filter
:FORWARD ACCEPT [0:0]
:INPUT ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
-A INPUT -p icmp -j ACCEPT
-A INPUT -i lo -j ACCEPT
-A INPUT -p tcp -m state --state NEW -m tcp --dport 22 -j ACCEPT
-A INPUT -p tcp -m state --state NEW -m tcp --dport 80 -j ACCEPT
-A INPUT -p tcp -m state --state NEW -m tcp --dport 443 -j ACCEPT
-A INPUT -p tcp -m state --state NEW -m tcp --dport 10000 -j ACCEPT
-A INPUT -j REJECT --reject-with icmp-host-prohibited
-A FORWARD -j REJECT --reject-with icmp-host-prohibited
COMMIT
# Generated by webmin
*mangle
:FORWARD ACCEPT [0:0]
:INPUT ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
:PREROUTING ACCEPT [0:0]
:POSTROUTING ACCEPT [0:0]
COMMIT
# Completed
# Generated by webmin
*nat
:INPUT ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
:PREROUTING ACCEPT [0:0]
:POSTROUTING ACCEPT [0:0]
COMMIT
# Completed

IPV6::::
-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
-A INPUT -p ipv6-icmp -j ACCEPT
-A INPUT -i lo -j ACCEPT
-A INPUT -p tcp -m state --state NEW -m tcp --dport 22 -j ACCEPT
-A INPUT -p tcp -m state --state NEW -m tcp --dport 80 -j ACCEPT
-A INPUT -p tcp -m state --state NEW -m tcp --dport 443 -j ACCEPT
-A INPUT -p tcp -m state --state NEW -m tcp --dport 10000 -j ACCEPT
-A INPUT -d fe80::/64 -p udp -m udp --dport 546 -m state --state NEW -j ACCEPT
-A INPUT -j REJECT --reject-with icmp6-adm-prohibited
-A FORWARD -j REJECT --reject-with icmp6-adm-prohibited

attached some print when I edit my first rule, this happens for all rules that have state configured;

workaround i have, is to manually add rules in my "/etc/sysconfig/iptables" and "/etc/sysconfig/ip6tables"

[Antonio Pedro Santos]

I was using default (not beta) Authentic Theme with same issue, so tried to update to latest (beta) to see if It worked, but it didn't.

[Ilia Rostovtsev]

Antonio, hi.

What about trying it in Gray Theme? Does it work then?

[Ilia]

Okay, I can confirm that it doesn't work in neither themes.

@jcameron Jamie, this is a module's bug.

[Jamie Cameron]

This is a bug in the Firewall module in Webmin 1.890. However, the 1.893 development release (and future full releases) will fix it - you can get the devel version from http://www.webmin.com/devel.html

[Antonio Pedro Santos]

Ok, thanx allot, I'll wait for the new version, I'll work with my workaround in the meantime.

Thanks for your reply. Nice job !