saltstack / saltstack/salt

[BUG] nftables module is missing support for icmpv6-types

Open
#67,882 2 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

bug needs-triage
Dominant language
Python
Stars
15.7k
Forks
5.6k
Avg merge
2d 44m
Merged PRs (30d)
80

Description

Description
While most nftables flags are supported, icmpv6-type packets can't be addressed.

Expected behavior
Salt should allow icmpv6-types to be used in ipv6 nftables rules.

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by locating Salt's nftables module and its existing handling for nftables flags and IPv6 rules. Add support for using icmpv6-types in IPv6 nftables rules, then verify that such a rule can address icmpv6-type packets.

Written by the indexing model from the issue text.

Assessment

Tech stack
python
Domain
networking
Issue type
Bug
Difficulty
3/5
Estimated time
1-2 days
Activity status
Quiet
Clarity
Mostly clear
Newbie friendliness
52/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.