saltstack / saltstack/salt

[BUG] firewalld: unable to enable/disable intra-zone forwarding

Open
#66,697 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

bug needs-triage
Dominant language
Python
Stars
15.7k
Forks
5.6k
Avg merge
2d 44m
Merged PRs (30d)
80

Description

Description
firewall-cmd has support for configuring intra-zone forwarding, see https://firewalld.org/documentation/man-pages/firewall-cmd.html and https://firewalld.org/2020/04/intra-zone-forwarding .

[--permanent] [--zone=zone] --add-forward
        Enable intra zone forwarding. 

[--permanent] [--zone=zone] --remove-forward
        Disable intra zone forwarding. 

This is currently not configurable via the salt modules and states.

Setup

None needed.

Steps to Reproduce the behavior

None needed, impossible to set the forward attribute via the salt module or state.

Expected behavior

Allow to configure intra-zone forwarding with the state/module.

Screenshots

None needed.

Versions Report

Not applicable

Additional context

None.

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

The issue points to Salt's firewalld modules and states; start there and compare their interfaces with firewall-cmd's --add-forward and --remove-forward options. Done means intra-zone forwarding can be enabled and disabled through both the module and state, with behavior matching the documented commands.

Written by the indexing model from the issue text.

Assessment

Tech stack
python
Domain
devops, networking
Issue type
Bug
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.