[hipl-dev] [Question #141008]: hipfw changes settings in /proc without resetting on exit

  • From: René Hummen <question141008@xxxxxxxxxxxxxxxxxxxxx>
  • To: hipl-dev@xxxxxxxxxxxxx
  • Date: Tue, 11 Jan 2011 12:18:23 -0000

New question #141008 on HIPL:
https://answers.launchpad.net/hipl/+question/141008

1.) As evident from 
http://bazaar.launchpad.net/%7Ehipl-core/hipl/trunk/annotate/head%3A/firewall/firewall.c?start_revid=5448#L1447
 hipfw unconditionally sets IP packet forwarding for IPv4 to enabled. This is 
behavior is fairly intrusive and may even not be required on end-hosts running 
hipfw.
In my opinion, the decision, whether to activate forwarding or not, should be 
left to the user of hipfw and should thus be removed from the code.

2.) As evident from 
http://bazaar.launchpad.net/%7Ehipl-core/hipl/trunk/annotate/head%3A/firewall/firewall.c?start_revid=5448#L718
 netlink buffer capacity is increased but not reset to the previous values on 
exit. This needs to be fixed. Why do we need to increase the buffer at all?

-- 
You received this question notification because you are a member of HIPL
core team, which is an answer contact for HIPL.

Other related posts: