#5306 firewall iptables accept/always
Gentlemen, I think I found a bug in 1.93 of webmin today. When I viewed my firewall rules there was an entry I did not like and I removed it. It was at the top as Accept - Always. Of course, that is not what I wanted. Once I applied the new configuration everything on the server stopped working. After many hours thinking I had three comprimised servers, I now think it is a bug.
It reads the line:
-A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
and makes it Accept - Always on the screen.
One server was not effected by it since it was a new server and the rules are in the /etc/webmn/firewall directory. But it uses the line
-A INPUT -m conntrack --ctstate ESTABLISHED,RELATED -j ACCEPT
That was my clue as to what was happening. When I removed the Accept - Always and then created a new ESTABLISHED and RELATED rule entry everything seems to be working great. The new entry used the new verbage as well when I checked the iptables.up.rules file. So it appears that the translation of the older rules perhaps are creating the problem. It could have converted the old entry when I installed 1.93 and that would have resolved the issue as well.
I do not know about any prior versions. All of my machines are running 1.93. Since I ahve seen this issue before, I assume it is only since 1.93 was installed.
Thank you,
James
This could be due to the change in iptables regarding the
stateandcstateflags.Which IPtables version are you running there?
Noticed the same problem.
Debian Buster
Webmin: 1.941
uname -r: 4.19.0-9-amd64
iptables: 1.8.2-4
Sounds related to https://sourceforge.net/p/webadmin/bugs/5197/ although this should have been fixed already.