maxscale.cnf.txt
maxscale.proftpd.fw.txt
ping_command.png
[MXS-1111] Request Ping not allowed Created: 2017-01-30 Updated: 2017-02-02 Resolved: 2017-01-30 |
|
| Status: | Closed |
| Project: | MariaDB MaxScale |
| Component/s: | dbfwfilter, regexfilter |
| Affects Version/s: | 2.0.3 |
| Fix Version/s: | 2.0.4 |
| Type: | Bug | Priority: | Major |
| Reporter: | Bruno Šimić (Inactive) | Assignee: | markus makela |
| Resolution: | Fixed | Votes: | 0 |
| Labels: | None | ||
| Environment: |
Red Hat, SuSE, Ubuntu |
||
| Attachments: |
maxscale.cnf.txt
maxscale.proftpd.fw.txt
ping_command.png
|
| Description |
|
SQL commands like SET, SELECT, UPDATE, INSERT are passed through as Request Query (in attached screenshot package number 17). Ping is coming in as its own type "Request ping" (in screenshot package number 19) and cannot be defined as a regex. The connection is terminated immediately with "permission denied" as error message. MaxScale conf and FW rules attached. |
| Comments |
| Comment by markus makela [ 2017-01-30 ] |
|
This is caused by the fact that action=allow requires that a query matches a rule before it is allowed which prevents non-COM_QUERY commands from being executed. A fix to this is to allow COM_PING and other similar commands though even if they don't match a rule. |