firewalld does not normalize an address of ipset entries in CIDR notation.
Issue
- Add
ipsetviafirewall-cmd --add-entry=10.0.1.0/22, but the10.0.1.0/22is not normalized in10.0.0.0/22. - It should be normalized in CIDR notation.
# firewall-cmd --permanent --info-ipset=test
test
type: hash:net
options:
entries: 10.0.1.0/22 <<<---
ipsetcommand normalizes the address correctly.
# ipset l
Name: test
...
Number of entries: 1
Members:
10.0.0.0/22 <<<---
- Why the
firewall-cmddoesn't normalize it? And how does the rule work; as10.0.0.0/22or10.0.1.0/32?
Environment
- Red Hat Enterprise Linux 8
- firewalld-0.8.2-7.el8_4.noarch and earlier version
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.