github-starred/firejail

Fork 0

mirror of https://github.com/netblue30/firejail.git synced 2026-05-15 14:16:14 -06:00

[GH-ISSUE #7054] Add link-local addresses to 'nolocal' firewall configs #3467

New issue

Closed

opened 2026-05-05 10:00:56 -06:00 by gitea-mirror · 2 comments

gitea-mirror commented

2026-05-05 10:00:56 -06:00

Owner

Originally created by @cobratbq on GitHub (Feb 6, 2026).
Original GitHub issue: https://github.com/netblue30/firejail/issues/7054

Description

I've noticed that nolocal.net/nolocal6.net do not have rules for link-local network address ranges. Even though these are not routed, they can still be used to set up local network communication, including services.

https://en.wikipedia.org/wiki/Link-local_address
Am I missing something, or should these be included?

169.254/16
fe80::
...

Steps to Reproduce

N/A. Observation based on scripts nolocal.net and nolocal6.net.

Expected behavior

Have link-local address ranges also explicitly blocked?

Actual behavior

Link-local address ranges are not mentioned at all.

Behavior without a profile

N/A.

Additional context

Environment

N/A.

Checklist

firejail version 0.9.74

Originally created by @cobratbq on GitHub (Feb 6, 2026). Original GitHub issue: https://github.com/netblue30/firejail/issues/7054 ### Description I've noticed that `nolocal.net`/`nolocal6.net` do not have rules for link-local network address ranges. Even though these are not routed, they can still be used to set up local network communication, including services. <https://en.wikipedia.org/wiki/Link-local_address> Am I missing something, or should these be included? `169.254/16` `fe80::` `...` ### Steps to Reproduce N/A. Observation based on scripts `nolocal.net` and `nolocal6.net`. ### Expected behavior Have link-local address ranges also explicitly blocked? ### Actual behavior Link-local address ranges are not mentioned at all. ### Behavior without a profile N/A. ### Additional context - ### Environment N/A. ### Checklist firejail version 0.9.74

gitea-mirror

2026-05-05 10:00:56 -06:00

closed this issue
added the
bug

networking
labels

gitea-mirror commented

2026-05-05 10:00:59 -06:00

Author

Owner

@netblue30 commented on GitHub (Feb 7, 2026):

All set, thanks for the info!

@netblue30 commented on GitHub (Feb 7, 2026): All set, thanks for the info!

gitea-mirror commented

2026-05-05 10:01:00 -06:00

Author

Owner

@kmk3 commented on GitHub (Feb 23, 2026):

Closing as fixed by 46134f6972.

@kmk3 commented on GitHub (Feb 23, 2026): Closing as fixed by 46134f6972f5fb7419006f77a9928fb796fd208e.

gitea-mirror referenced this issue

2026-05-05 10:26:16 -06:00

[PR #3467] [MERGED] Add strawberry profile to README{,.md} & RELNOTES #4771

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#3467

No description provided.

Rows
Columns