[Bug 746497] [NEW] libvirt installs firewall rules on package upgrades

[Nafallo Bjälevik]

Public bug reported:

libvirt recently had a security upgrade. Every time the package has an
upgrade it re-installs firewall rules with means all my VMs loose
Internet connectivity.

After upgrade:
nafallo at pony:~$ sudo iptables -vnL
Chain INPUT (policy ACCEPT 3943M packets, 2378G bytes)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     udp  --  bklabs *       0.0.0.0/0            0.0.0.0/0           udp dpt:53 
    0     0 ACCEPT     tcp  --  bklabs *       0.0.0.0/0            0.0.0.0/0           tcp dpt:53 
    0     0 ACCEPT     udp  --  bklabs *       0.0.0.0/0            0.0.0.0/0           udp dpt:67 
    0     0 ACCEPT     tcp  --  bklabs *       0.0.0.0/0            0.0.0.0/0           tcp dpt:67 

Chain FORWARD (policy ACCEPT 14G packets, 11T bytes)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     all  --  *      bklabs  0.0.0.0/0            91.194.67.9         
    0     0 ACCEPT     all  --  bklabs *       91.194.67.9          0.0.0.0/0           
   38  3992 ACCEPT     all  --  bklabs bklabs  0.0.0.0/0            0.0.0.0/0           
  367 34537 REJECT     all  --  *      bklabs  0.0.0.0/0            0.0.0.0/0           reject-with icmp-port-unreachable 
  271 17023 REJECT     all  --  bklabs *       0.0.0.0/0            0.0.0.0/0           reject-with icmp-port-unreachable 

Chain OUTPUT (policy ACCEPT 2317M packets, 1709G bytes)
 pkts bytes target     prot opt in     out     source               destination

Fix: nafallo at pony:~$ sudo iptables -F

My setup is not the default, but I'm bored of having the package
upgrades break my setup.

** Affects: libvirt (Ubuntu)
     Importance: High
         Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to libvirt in Ubuntu.
https://bugs.launchpad.net/bugs/746497

Title:
  libvirt installs firewall rules on package upgrades