action #122653
closedQA - coordination #121720: [saga][epic] Migration to QE setup in PRG2+NUE3 while ensuring availability
QA - coordination #116623: [epic] Migration of SUSE Nbg based openQA+QA+QAM systems to new security zones
openQA Project - coordination #122650: [epic] Fix firewall block and improve error reporting when test fails in curl log upload
Ask SUSE-IT network admins to REJECT packets instead of DROP so that we get more clear results size:S
0%
Description
Motivation¶
When there is traffic blocked in the network dropped packets cause a lot of confusion, e.g. see #122539. If possible the firewall should be changed to REJECT rather than DROP packets in the hope that this gives more clear error messages
Acceptance criteria¶
- AC1: An example command failure due to firewall-rejected (rather than dropped) traffic is shown within the SUSE network
Suggestions¶
- Ask Lazaros Haleplidis in chat and wait for response -> https://suse.slack.com/archives/C0488BZNA5S/p1672748720536449?thread_ts=1670498352.238729&cid=C0488BZNA5S
- If not successful within reasonable time open SD ticket and wait for that
- Document outcome reachable to openQA test reviewers
Updated by okurz over 1 year ago
- Copied to action #122656: Ask SUSE-IT network admins to *not* block this traffic which we need for tests regarding s390x within SUSE network size:M added
Updated by livdywan over 1 year ago
- Subject changed from Ask SUSE-IT network admins to REJECT packets instead of DROP so that we get more clear results to Ask SUSE-IT network admins to REJECT packets instead of DROP so that we get more clear results size:S
- Status changed from New to Workable
Updated by okurz over 1 year ago
- Due date set to 2023-02-24
- Status changed from Workable to Feedback
- Assignee set to okurz
Discussing with lhaleplidis. The firewall supports a TCP_RESET so it depends if the applications handle it properly. The proper way would be to respond with "port unreachable". So maybe we don't want this. lhaleplidis will create a ticket about this so that we should be able to track this.
Updated by okurz about 1 year ago
- Due date deleted (
2023-02-24) - Status changed from Feedback to Rejected
We will either hear about it or not. I don't consider this important enough for me to track within our clogged-up backlog.