github-starred/firejail

Fork 0

mirror of https://github.com/netblue30/firejail.git synced 2026-05-15 14:16:14 -06:00

[GH-ISSUE #1126] --netfilter example not in effect #773

New issue

Closed

opened 2026-05-05 06:37:54 -06:00 by gitea-mirror · 3 comments

gitea-mirror commented

2026-05-05 06:37:54 -06:00

Owner

Originally created by @testbird on GitHub (Mar 5, 2017).
Original GitHub issue: https://github.com/netblue30/firejail/issues/1126

IIUC this should fail:

firejail --net=eth0 --netfilter=/etc/firejail/nolocal.net wget http://mylocal.server/index.html

But it succeeds and I found index.html was downloaded.

Originally created by @testbird on GitHub (Mar 5, 2017). Original GitHub issue: https://github.com/netblue30/firejail/issues/1126 IIUC this should fail: ``` firejail --net=eth0 --netfilter=/etc/firejail/nolocal.net wget http://mylocal.server/index.html ``` But it succeeds and I found index.html was downloaded.

gitea-mirror

2026-05-05 06:37:54 -06:00

closed this issue
added the
bug
label

gitea-mirror commented

2026-05-05 06:37:58 -06:00

Author

Owner

@netblue30 commented on GitHub (Mar 7, 2017):

What's the ip of your local server? I have in the filter something like this:

-A OUTPUT -d 192.168.0.0/16 -j DROP
-A OUTPUT -d 10.0.0.0/8 -j DROP
-A OUTPUT -d 172.16.0.0/12 -j DROP

@netblue30 commented on GitHub (Mar 7, 2017): What's the ip of your local server? I have in the filter something like this: ````` -A OUTPUT -d 192.168.0.0/16 -j DROP -A OUTPUT -d 10.0.0.0/8 -j DROP -A OUTPUT -d 172.16.0.0/12 -j DROP `````

gitea-mirror commented

2026-05-05 06:38:01 -06:00

Author

Owner

@testbird commented on GitHub (Mar 8, 2017):

Today I can not reproduce this anymore. Maybe it has only happended when there were stall firejail processes still running (#1128) ?

@testbird commented on GitHub (Mar 8, 2017): Today I can not reproduce this anymore. Maybe it has only happended when there were stall firejail processes still running (#1128) ?

gitea-mirror commented

2026-05-05 06:38:03 -06:00

Author

Owner

@netblue30 commented on GitHub (Mar 8, 2017):

No problem.

@netblue30 commented on GitHub (Mar 8, 2017): No problem.

gitea-mirror referenced this issue

2026-05-05 10:07:13 -06:00

[PR #773] [MERGED] Add option to block X11 #3751

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#773

No description provided.

Rows
Columns