From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from firstgate.proxmox.com (firstgate.proxmox.com [212.224.123.68]) by lore.proxmox.com (Postfix) with ESMTPS id 7CDD51FF178 for ; Mon, 15 Dec 2025 16:16:25 +0100 (CET) Received: from firstgate.proxmox.com (localhost [127.0.0.1]) by firstgate.proxmox.com (Proxmox) with ESMTP id 32E8D10606; Mon, 15 Dec 2025 16:17:11 +0100 (CET) Message-ID: <7b494d10-1a2c-4bd2-a058-1a56d3f9d1bb@proxmox.com> Date: Mon, 15 Dec 2025 16:16:34 +0100 MIME-Version: 1.0 User-Agent: Mozilla Thunderbird To: pve-devel@lists.proxmox.com References: <20251201123424.94742-1-r.obkircher@proxmox.com> <61d8eb9c-2b58-4db2-a4ad-b0b85ec0cc00@proxmox.com> <8c636f5c-72e1-4486-aa58-f35c4f6adae2@proxmox.com> <9a96aa1e-5c19-4976-847a-3a9ce79f3ebf@proxmox.com> <4c8947bb-ad86-45d8-8e0b-0424d5790f22@proxmox.com> Content-Language: en-US, de-AT From: Robert Obkircher In-Reply-To: <4c8947bb-ad86-45d8-8e0b-0424d5790f22@proxmox.com> X-Bm-Milter-Handled: 55990f41-d878-4baa-be0a-ee34c49e34d2 X-Bm-Transport-Timestamp: 1765811787590 X-SPAM-LEVEL: Spam detection results: 0 AWL 0.058 Adjusted score from AWL reputation of From: address BAYES_00 -1.9 Bayes spam probability is 0 to 1% DMARC_MISSING 0.1 Missing DMARC policy KAM_DMARC_STATUS 0.01 Test Rule for DKIM or SPF Failure with Strict Alignment SPF_HELO_NONE 0.001 SPF: HELO does not publish an SPF Record SPF_PASS -0.001 SPF: sender matches SPF record Subject: Re: [pve-devel] [PATCH v1 pve-firewall] fix #7068: show rule comments in iptables output X-BeenThere: pve-devel@lists.proxmox.com X-Mailman-Version: 2.1.29 Precedence: list List-Id: Proxmox VE development discussion List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: Proxmox VE development discussion Content-Transfer-Encoding: base64 Content-Type: text/plain; charset="utf-8"; Format="flowed" Errors-To: pve-devel-bounces@lists.proxmox.com Sender: "pve-devel" c3VwZXJzZWRlZC1ieTogCmh0dHBzOi8vbG9yZS5wcm94bW94LmNvbS9wdmUtZGV2ZWwvMjAyNTEy MTUxNTA5MDYuMjU3MTUxLTEtci5vYmtpcmNoZXJAcHJveG1veC5jb20vCgpPbiAxMi85LzI1IDEx OjIxLCBSb2JlcnQgT2JraXJjaGVyIHdyb3RlOgo+Cj4gT24gMTIvNS8yNSAxNDo1OCwgU3RlZmFu IEhhbnJlaWNoIHdyb3RlOgo+Pgo+PiBPbiAxMi81LzI1IDI6MDIgUE0sIFJvYmVydCBPYmtpcmNo ZXIgd3JvdGU6Cj4+PiBPbiAxMi81LzI1IDEyOjU4LCBTdGVmYW4gSGFucmVpY2ggd3JvdGU6Cj4+ Pj4gVGVzdGVkIHRoaXMgaW4gYSBzaW1pbGFyIHZlaW4gYXMgdGhlIG5mdGFibGVzIG9uZToKPj4+ PiAqICJub3JtYWwiIGNvbW1lbnRzCj4+Pj4gKiBjb21tZW50cyB0aGF0IGFyZSB0b28gbG9uZwo+ Pj4+ICogY29tbWVudHMgdGhhdCBhcmUgdG9vIGxvbmcgYW5kIGRvIG5vdCB0cnVuY2F0ZSBuaWNl bHkgYXQgdGhlIDI1NQo+Pj4+IGJvdW5kYXJ5Cj4+Pj4gKiBjb21tZW50cyBpbiBzZWN1cml0eSBn cm91cHMKPj4+PiAqIGVtb2ppcyBpbiBjb21tZW50cwo+Pj4+Cj4+Pj4gYWZhaWN0IHRoZSBQVkVD T01NRU5UOiBwcmVmaXggaXMgbWVyZWx5IHZpc3VhbD8gaXQgZG9lc24ndCBzZXJ2ZSBhbnkKPj4+ PiBmdW5jdGlvbmFsIHB1cnBvc2U/IEF0IGxlYXN0IGEgcXVpY2sgbW9ua2V5LXBhdGNoIHJlbW92 aW5nIGl0IGRpZG4ndAo+Pj4+IGJyZWFrIGFueXRoaW5nIGFuZCBqdWRnaW5nIGZyb20gdGhlIHNv dXJjZSBjb2RlIGl0IHNlZW1zIGZpbmUgYXMgd2VsbC4KPj4+PiBJbW8gaXQgd291bGQgYmUgZmlu ZSB0aGVuIHRvIGNvbXBsZXRlbHkgb21pdCBpdCB0aGVuIChldmVuIGluIHRoZSBjYXNlCj4+Pj4g d2hlcmUgcnVsZSBjb21tZW50cyBzdGFydCB3aXRoIFBWRVNJRykuCj4+PiBJIHRoaW5rIHRoZSBw YXJzZXIgaW4gaXB0YWJsZXNfZ2V0X2NoYWlucyB3b3VsZCBhdCBsZWFzdCB0ZW1wb3JhcmlseSAK Pj4+IHNldAo+Pj4gYW4gaW52YWxpZCBzaWduYXR1cmUgb24gdGhlIGNoYWluIGFuZCBvbmx5IG92 ZXJyaWRlIGl0IGxhdGVyIGJlY2F1c2UgCj4+PiB0aGUKPj4+IHJlYWwgUFZFU0lHOiBydWxlIGlz IGFsd2F5cyBwcmVzZW50IGFuZCBwcmludGVkIGxhc3QuIFJlbHlpbmcgb24gdGhhdAo+Pj4gc2Vl bWVkIGEgYml0IHNrZXRjaHkuCj4+IERvIHlvdSBtZWFuIHRoZSAndW5rbm93bicgc2lnbmF0dXJl PyBTZWVtcyBsaWtlIHRoaXMgaGFwcGVucyBkdWUgdG8gdGhpcwo+PiBsaW5lIGhlcmUgaW4gdGhl IHBhcnNlciBjYWxsYmFjayBbMV0uIFRoZSBvdGhlciByZWdleCBtYXRjaGVzIG9ubHkKPj4gYFBW RVNJRzpgIGNvbW1lbnRzIGFueXdheS4KPj4KPj4gSWYgd2UgcmVtb3ZlIHRoZSBwcmVmaXgsIGFk ZGluZyBhIGNvbW1lbnQgd2l0aCBhIGBQVkVTSUc6YCBwcmVmaXggd291bGQKPj4gZG8gdGhhdCwg SSBndWVzcz8KPj4KPj4gWzFdCj4+IGh0dHBzOi8vZ2l0LnByb3htb3guY29tLz9wPXB2ZS1maXJl d2FsbC5naXQ7YT1ibG9iO2Y9c3JjL1BWRS9GaXJld2FsbC5wbTtoPTkzZjhjMzQ0NjZmZDYxYmM2 NDY0MzkyNzU1OTdhYTI0Yjg3MTgwNTM7aGI9SEVBRCNsMjA5MyAKPj4KPiBJIG1lYW50IHRoYXQg d2l0aG91dCBhIHByZWZpeCB0aGUgb3RoZXIgcmVnZXggd291bGQgbWF0Y2ggdXNlciAKPiBjb21t ZW50cyBhcyB3ZWxsLiBFLmcgaWYgSSByZW1vdmUKPgo+IC3CoCDCoCAkY29tbWVudCA9ICJQVkVD T01NRU5UOiRjb21tZW50IjsgIyBhdm9pZCBhbnkgY29uZnVzaW9uIHdpdGggCj4gUFZFU0lHIGNv bW1lbnRzCj4KPiBhbmQgYWRkOgo+Cj4gwqAgwqAgwqAgwqAgwqB9IGVsc2lmICgkbGluZSA9fiAK PiBtL14tQVxzKyhcUyspXHMuKi0tY29tbWVudFxzK1wiUFZFU0lHOihcUyspXCIvKSB7Cj4gwqAg wqAgwqAgwqAgwqAgwqAgwqBteSAoJGNoYWluLCAkc2lnKSA9ICgkMSwgJDIpOwo+IMKgIMKgIMKg IMKgIMKgIMKgIMKgcmV0dXJuIGlmICEmJGlzX3B2ZWZ3X2NoYWluKCRjaGFpbik7Cj4gK8KgIMKg IMKgIMKgIMKgIMKgIHByaW50ICIkY2hhaW4gOj0gJHNpZyBcbiI7Cj4gwqAgwqAgwqAgwqAgwqAg wqAgwqAkcmVzLT57JGNoYWlufSA9ICRzaWc7Cj4KPiBhIHJ1bGUgbGlrZSAtQSBQVkVGVy1IT1NU LUlOwqAgLWogUkVUVVJOIC1tIGNvbW1lbnQgLS1jb21tZW50IAo+ICJQVkVTSUc6YWJjIiBicmll Zmx5IHNldHMgJHJlcy0+e2NoYWlufSB0byBhYmM6Cj4KPiBQVkVGVy1IT1NULUlOIDo9IGFiYwo+ IFBWRUZXLUhPU1QtSU4gOj0gS2VTNmhiUVh6NHRFSGVtUXFoSnFPcVdFV0JBCj4KPgo+Pj4+IG1i IHNvbWVvbmUgd2l0aCBtb3JlIGV4cGVyaWVuY2Ugd2l0aCBwZXJsIGFuZCB1dGYtOCBjYW4gY2hp bWUgaW4gb24gCj4+Pj4gdGhlCj4+Pj4gdHJ1bmNhdGlvbiBsb2dpYz8KPj4+Pgo+Pj4+IFRlc3Rl ZC1ieTogU3RlZmFuIEhhbnJlaWNoIDxzLmhhbnJlaWNoQHByb3htb3guY29tPgo+Pj4+Cj4+Pj4g T24gMTIvMS8yNSAxOjMzIFBNLCBSb2JlcnQgT2JraXJjaGVyIHdyb3RlOgo+Pj4+PiBVc2UgdGhl IGlwdGFibGVzIGNvbW1lbnQgZXh0ZW5zaW9uIHRvIGluY2x1ZGUgY29tbWVudHMgZnJvbSB0aGUg VUkuCj4+Pj4+IFByZWZpeCB0aGVtIHdpdGggIlBWRUNPTU1FTlQ6IiB0byBhdm9pZCBpbnRlcmZl cmluZyB3aXRoIHRoZSBleGlzdGluZwo+Pj4+PiAiUFZFU0lHOiRzaWciIGNvbW1lbnRzLCB3aGlj aCBhcmUgdXNlZCB0byBzdG9yZSBzaWduYXR1cmVzIGZvciBjaGFuZ2UKPj4+Pj4gZGV0ZWN0aW9u Lgo+Pj4+Pgo+Pj4+PiBUaGUgdG90YWwgbGVuZ3RoIG9mIHRoZSAodW5lc2NhcGVkKSBjb21tZW50 cyBpcyBsaW1pdGVkIHRvIDI1NSB1dGY4Cj4+Pj4+IGJ5dGVzLiBBY2NvcmRpbmcgdG8gdGhlIG1h biBwYWdlIGl0IGNvdWxkIGJlIHVwIHRvIDI1NiBjaGFyYWN0ZXJzLCAKPj4+Pj4gYnV0Cj4+Pj4+ IHRoZSBhY3R1YWwgaW1wbGVtZW50YXRpb24gc2VlbXMgdG8gemVybyB0ZXJtaW5hdGUgdGhlIGJ1 ZmZlciBiZWZvcmUKPj4+Pj4gc2F2aW5nLiBGb3IgZXhhbXBsZSwgdGhlIGZvbGxvd2luZyBjb21t YW5kIHByb2R1Y2VzIGEgMjU1IGNoYXIgCj4+Pj4+IGNvbW1lbnQKPj4+Pj4gZW5kaW5nIGluICdh JzoKPj4+Pj4gaXB0YWJsZXMgLUEgUFZFRlctSE9TVC1JTiAtbSBjb21tZW50IC0tY29tbWVudCAk KHB5dGhvbjMgLWMKPj4+Pj4gInByaW50KCdhYicqMjU2KSIpCj4+Pj4+Cj4+Pj4+IFVubGlrZSB0 aGUgaXB0YWJsZXMgY29tbWFuZCwgdGhpcyB2ZXJzaW9uIHRydW5jYXRlcyB0byB2YWxpZCB1dGY4 Lgo+Pj4+Pgo+Pj4+PiBTaWduZWQtb2ZmLWJ5OiBSb2JlcnQgT2JraXJjaGVyIDxyLm9ia2lyY2hl ckBwcm94bW94LmNvbT4KPj4+Pj4gLS0tCj4+Pj4+IMKgwqAgc3JjL1BWRS9GaXJld2FsbC5wbSB8 IDE3ICsrKysrKysrKysrKysrKystCj4+Pj4+IMKgwqAgMSBmaWxlIGNoYW5nZWQsIDE2IGluc2Vy dGlvbnMoKyksIDEgZGVsZXRpb24oLSkKPj4+Pj4KPj4+Pj4gZGlmZiAtLWdpdCBhL3NyYy9QVkUv RmlyZXdhbGwucG0gYi9zcmMvUFZFL0ZpcmV3YWxsLnBtCj4+Pj4+IGluZGV4IDkzZjhjMzQuLjY4 ODgyOWEgMTAwNjQ0Cj4+Pj4+IC0tLSBhL3NyYy9QVkUvRmlyZXdhbGwucG0KPj4+Pj4gKysrIGIv c3JjL1BWRS9GaXJld2FsbC5wbQo+Pj4+PiBAQCAtMjI3MSw2ICsyMjcxLDIwIEBAIHN1YiBpcHRf Z2VuX3NyY19vcl9kc3RfbWF0Y2ggewo+Pj4+PiDCoMKgwqDCoMKgwqAgcmV0dXJuICRtYXRjaDsK Pj4+Pj4gwqDCoCB9Cj4+Pj4+IMKgwqAgK3N1YiBwcmludF9pcHRfY29tbWVudCB7Cj4+Pj4+ICvC oMKgwqAgbXkgKCRjb21tZW50KSA9IEBfOwo+Pj4+PiArwqDCoMKgIHJldHVybiAiIiBpZiAhZGVm aW5lZCgkY29tbWVudCkgfHwgJGNvbW1lbnQgZXEgIiI7Cj4+Pj4+ICvCoMKgwqAgJGNvbW1lbnQg PSBlbmNvZGUoInV0ZjgiLCAkY29tbWVudCwgRW5jb2RlOjpMRUFWRV9TUkMpOwo+Pj4+PiArwqDC oMKgICRjb21tZW50ID0gIlBWRUNPTU1FTlQ6JGNvbW1lbnQiOyAjIGF2b2lkIGFueSBjb25mdXNp b24gd2l0aAo+Pj4+PiBQVkVTSUcgY29tbWVudHMKPj4+Pj4gKwo+Pj4+PiArwqDCoMKgICMgbWFu IGlwdGFibGVzLWV4dGVuc2lvbnMgc2F5cyAyNTYgY2hhcnMsIGJ1dCB0aGUgY29kZSBvbmx5Cj4+ Pj4+IHNhdmVzIDI1NQo+Pj4+PiArwqDCoMKgICRjb21tZW50ID0gc3Vic3RyKCRjb21tZW50LCAw LCAyNTUpOwo+Pj4+PiArwqDCoMKgICRjb21tZW50ID0gZW5jb2RlKCd1dGY4JywgZGVjb2RlKCd1 dGY4JywgJGNvbW1lbnQsCj4+Pj4+IEVuY29kZTo6RkJfUVVJRVQgfCBFbmNvZGU6OkxFQVZFX1NS QykpOwo+Pj4+PiArCj4+Pj4+ICvCoMKgwqAgJGNvbW1lbnQgPX4gcy9bXFwiJ10vXFwkMS9nOyAj IGVzY2FwZSBsb2dpYyBmcm9tCj4+Pj4+IHh0YWJsZXNfc2F2ZV9zdHJpbmcKPj4gc2VlbXMgbGlr ZSB0aGVyZSBpcyBzdGlsbCBhbiBpc3N1ZSBoZXJlIC0gc2V0dGluZyB0aGUgY29tbWVudCBgIyMj ImAgSQo+PiBnZXQgc2V2ZXJhbDoKPj4KPj4gVXNlIG9mIHVuaW5pdGlhbGl6ZWQgdmFsdWUgJDEg aW4gY29uY2F0ZW5hdGlvbiAoLikgb3Igc3RyaW5nIGF0Cj4+IC91c3Ivc2hhcmUvcGVybDUvUFZF L0ZpcmV3YWxsLnBtIGxpbmUgMjI4NC4KPj4KPj4gQ2FuIGJlIGVhc2lseSBjaGVja2VkIHZpYSBg cHZlLWZpcmV3YWxsIGNvbXBpbGVgLgo+IEkgdGhpbmsgdGhpcyBoYWQgbm90aGluZyB0byBkbyB3 aXRoICcjJywgSSBqdXN0IGZvcmdvdCB0aGUgY2FwdHVyZSAKPiBncm91cCBpbiB0aGUgc3Vic3Rp dHV0aW9uLgo+Pgo+Pj4+PiArwqDCoMKgIHJldHVybiAiIC1tIGNvbW1lbnQgLS1jb21tZW50IFwi JGNvbW1lbnRcIiI7ICMgbmV2ZXIgb21pdCBxdW90ZXMKPj4+Pj4gYmVjYXVzZSBvZiB0aGUgY29s b24KPj4+Pj4gK30KPj4+Pj4gKwo+Pj4+PiDCoMKgICMgY29udmVydCBhICVydWxlIHRvIGFuIGFy cmF5IG9mIGlwdGFibGVzIGNvbW1hbmRzCj4+Pj4+IMKgwqAgc3ViIGlwdF9ydWxlX3RvX2NtZHMg ewo+Pj4+PiDCoMKgwqDCoMKgwqAgbXkgKCRydWxlLCAkY2hhaW4sICRpcHZlcnNpb24sICRjbHVz dGVyX2NvbmYsICRmd19jb25mLCAkdm1pZCkKPj4+Pj4gPSBAXzsKPj4+Pj4gQEAgLTIzNzUsNyAr MjM4OSw4IEBAIHN1YiBpcHRfcnVsZV90b19jbWRzIHsKPj4+Pj4gwqDCoMKgwqDCoMKgwqDCoMKg wqAgbXkgJGxvZ2FjdGlvbiA9IGdldF9sb2dfcnVsZV9iYXNlKCRjaGFpbiwgJHZtaWQsICRydWxl LQo+Pj4+Pj4ge2xvZ21zZ30sICRsb2dsZXZlbCk7Cj4+Pj4+IMKgwqDCoMKgwqDCoMKgwqDCoMKg IHB1c2ggQGlwdGNtZHMsICItQSAkY2hhaW4gJG1hdGNoc3RyICRsb2dhY3Rpb24iOwo+Pj4+PiDC oMKgwqDCoMKgwqAgfQo+Pj4+PiAtwqDCoMKgIHB1c2ggQGlwdGNtZHMsICItQSAkY2hhaW4gJG1h dGNoc3RyICR0YXJnZXRzdHIiOwo+Pj4+PiArwqDCoMKgIG15ICRjb21tZW50ID0gcHJpbnRfaXB0 X2NvbW1lbnQoJHJ1bGUtPntjb21tZW50fSk7Cj4+Pj4+ICvCoMKgwqAgcHVzaCBAaXB0Y21kcywg Ii1BICRjaGFpbiAkbWF0Y2hzdHIgJHRhcmdldHN0ciRjb21tZW50IjsKPj4+Pj4gwqDCoMKgwqDC oMKgIHJldHVybiBAaXB0Y21kczsKPj4+Pj4gwqDCoCB9Cj4+Cj4KPgo+IF9fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fCj4gcHZlLWRldmVsIG1haWxpbmcgbGlz dAo+IHB2ZS1kZXZlbEBsaXN0cy5wcm94bW94LmNvbQo+IGh0dHBzOi8vbGlzdHMucHJveG1veC5j b20vY2dpLWJpbi9tYWlsbWFuL2xpc3RpbmZvL3B2ZS1kZXZlbAoKCl9fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fCnB2ZS1kZXZlbCBtYWlsaW5nIGxpc3QKcHZl LWRldmVsQGxpc3RzLnByb3htb3guY29tCmh0dHBzOi8vbGlzdHMucHJveG1veC5jb20vY2dpLWJp bi9tYWlsbWFuL2xpc3RpbmZvL3B2ZS1kZXZlbAo=