Issue 047 — and the half that runs the other way #42

Merged

jschoubben merged 1 commits from issue/047-the-other-half into main

2026-09-14 13:09:37 +00:00

Author	SHA1	Message	Date
jschoubben	261064ec63	Issue 047 — and the half that runs the other way The report covered ports the firewall cannot close. The matching fault is ports it does close and should not: rules come from what modules declare, a migrating mesh knows about almost nothing, and anything listening on the host is dropped. No module declares an ssh port and the generator has no allowance for one. The session that loads the rules survives on conntrack until it drops, and then the machine is reached from a rescue console.	2026-09-14 15:09:20 +02:00

Author

SHA1

Message

Date

jschoubben

261064ec63

Issue 047 — and the half that runs the other way

The report covered ports the firewall cannot close. The matching fault is ports
it does close and should not: rules come from what modules declare, a migrating
mesh knows about almost nothing, and anything listening on the host is dropped.

No module declares an ssh port and the generator has no allowance for one. The
session that loads the rules survives on conntrack until it drops, and then the
machine is reached from a rescue console.

2026-09-14 15:09:20 +02:00