Re: ICMP echo working but still getting a block message in log

On Tue, Feb 08, 2022 at 11:27:57PM +0100, Koen Drai wrote:

Hi,

I am running into a firewalld behavior again that I cannot understand.

Running firewalld on a Debian 11 box.

The zone file contains the following:

<icmp-block-inversion/> <icmp-block name="echo-reply"/> <icmp-block name="echo-request"/>

A ping from a client results in a reply, but I am still getting the following error message in syslog:

"filter_zone_knet_HOST_ICMP_BLOCK: "IN=enp2s0 OUT= MAC=<ANOM> SRC=192.168.1.9 DST=192.168.1.1 LEN=60 TOS=0x00 PREC=0x00 TTL=128 ID=56385 PROTO=ICMP TYPE=8 CODE=0 ID=1 SEQ=509

What's happening?

This has been fixed.

https://github.com/firewalld/firewalld/issues/696

Fixed in: v0.9.5, v1.0.2