Strange dd-wrt Firewall Rules

I recently got the urge to do a security review of a network I manage with a Linksys Router.  It was running the latest version of dd-wrt with a set of unmodified (as best I knew) firewall rules.  I had a scare when the first thing I saw was:

root@DD-WRT:~# iptables -L
Chain INPUT (policy ACCEPT)
target     prot opt source               destination
ACCEPT     0    --  u12-20.dsl.vianetworks.de  anywhere
ACCEPT     0    --  newmedia.bensheim.manet.de  anywhere
ACCEPT     0    --  anywhere             anywhere            state RELATED,ESTABLISHED

--cut--

Apparently this is a known issue with the vpn version of dd-wrt v24 sp1.  I could only find one reference to it on the internet here.  The form thread explains a few ways to disable it and a fix has been checked into the main source tree.  It was still a little unnerving considering this was the first thing I looked at!

Fedora 10 Feature Process and Beyond

Things are coming together for yet another Fedora release.  Although this is the tenth Fedora release it is only the third iteration of the new feature process.  From my vantage point the process is getting better though the level of confusion and debate about whether something should be a feature or not continues for some folks.  For the curious, the guidelines are here.

Feature freeze for Fedora 10 is this coming Tuesday, August 19, 2008.  The current list for Fedora 10 is growing with more waiting to go through the acceptance process here.  At feature freeze all features must be significantly completed and testable or they will have to wait for Fedora 11.

During this release cycle I collaborated with Paul Frields who greatly improved the documentation explaining the process.  We also got help from the Fedora art folks to make the process diagram better.  We also changed the categories used to classify feature pages in an attempt to bring greater clarity there.

And like all the past releases if you still don’t like the process and want to do something (besides complaining) give us some constructive, practical suggestions on what can be better.

• Fedora 9
• Fedora 10
• Fedora 11

I am proposing that any changes for the Fedora 11 release be reviewed and voted on at FESCo’s meeting on Wednesday, October 1, 2008.  This way we can get an earlier start on the Fedora 11 features compared to the late start we had for Fedora 10.

UPDATE (2008-08-29): Due to recent infrastructure outages the feature freeze date for Fedora 10 has moved to 2008-09-09. More details here

Just Had to Do It

With the help of a few other folks I’ve been trying to help revitalize our weekly bug triage meetings and meet on a consistent basis.  We’re meeting every Tuesday at 14:00 UTC (10 AM EDT) on #fedora-meeting on irc.freenode. net.  Join us tomorrow (or today depending on where you are or when you read this)!

Right now we are making it our sole focus to tackle NEW rawhide bugs in anticipation of Fedora 10.

After a reminder from stickster as to how easy it was I remembered that I had committed to triaging 50 bugs before our next meeting I went to work.  When I looked at my favorite bug status url I saw that we were 6 bugs shy of getting below 1,400 bugs in NEW in quite some time.  I triaged those and then some.