Skip to content

Commit

Permalink
Merge pull request #11618 from microsoft/user/cfetoiu/update_iptables
Browse files Browse the repository at this point in the history 
Improve collection of iptables rules in networking script
  • Loading branch information
@keith-horton
keith-horton authored May 28, 2024
2 parents 9d82dd8 + b850837 commit 04c3377
Showing 1 changed file with 27 additions and 2 deletions.
29 changes: 27 additions & 2 deletions diagnostics/networking.sh
View file
Original file line number Diff line number Diff line change
Expand Up @@ -25,6 +25,31 @@ echo "Printing DNS configuration"
cat /etc/resolv.conf

echo "Printing iptables and nftables rules"
iptables -S
ip6tables -S
# iptables can be configured using both "iptables" and the legacy version "iptables-legacy". It's possible they can be used together
# (although not recommended). Collect both to make sure no rules are missed.
# We list the contents of the most common tables (filter, nat, mangle, raw, security)
iptables -vL -t filter
iptables -vL -t nat
iptables -vL -t mangle
iptables -vL -t raw
iptables -vL -t security

ip6tables -vL -t filter
ip6tables -vL -t nat
ip6tables -vL -t mangle
ip6tables -vL -t raw
ip6tables -vL -t security

iptables-legacy -vL -t filter
iptables-legacy -vL -t nat
iptables-legacy -vL -t mangle
iptables-legacy -vL -t raw
iptables-legacy -vL -t security

ip6tables-legacy -vL -t filter
ip6tables-legacy -vL -t nat
ip6tables-legacy -vL -t mangle
ip6tables-legacy -vL -t raw
ip6tables-legacy -vL -t security

nft list ruleset

1 comment on commit 04c3377

@dcasota
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@CatalinFetoiu @keith-horton From an enterprise-2-enterprise perspective, the future wsl (cbl-mariner split-up) networking implementation could profit from achievements in VMware By Broadcom open-source product Photon OS, see

B2B open-source integration solves real problems. I strongly believe that in open-source a handshake is more than a handshake, it is real integration by the cascade of managers and engineers, and not a prehistoric IT securitate-at-all-cost brainwash. There is no customer value to recall the same challenges e.g. for wired, wi-fi and usb-c-related ipv4/ipv6, dhcpv4, dhcpv6, lldp, netdevs, vlan, vxlan, bridge, bond, veth, etc.. Can you initiate a discussion internally and get in touch e.g. with Vasavi Sirnapalli and Alexey Makhalov? See https://github.com/vmware/photon/blob/master/AUTHORS.md.

Please sign in to comment.