FC5 iptables-restore failure

5 messages, 3 authors, 2007-02-15 · open the first message on its own page

FC5 iptables-restore failure

From: Andrew Morton <akpm@linux-foundation.org>
Date: 2007-02-15 10:45:15

I've recently been noticing nasty messages come out of FC5:

sony:/home/akpm# service iptables stop
Flushing firewall rules:                                   [  OK  ]
Setting chains to policy ACCEPT: filter                    [  OK  ]
Unloading iptables modules:                                [  OK  ]
sony:/home/akpm# service iptables start
Applying iptables firewall rules: iptables-restore: line 20 failed
                                                           [FAILED]

Dunno when it started happening, but it's in mainline now.

It's a pretty stupid error message.  line 20 of what?

sony:/home/akpm# rpm -q iptables
iptables-1.3.5-1.2

Re: FC5 iptables-restore failure

From: Dave Jones <hidden>
Date: 2007-02-15 11:20:30

On Thu, Feb 15, 2007 at 02:45:07AM -0800, Andrew Morton wrote:
 > 
 > I've recently been noticing nasty messages come out of FC5:
 > 
 > sony:/home/akpm# service iptables stop
 > Flushing firewall rules:                                   [  OK  ]
 > Setting chains to policy ACCEPT: filter                    [  OK  ]
 > Unloading iptables modules:                                [  OK  ]
 > sony:/home/akpm# service iptables start
 > Applying iptables firewall rules: iptables-restore: line 20 failed
 >                                                            [FAILED]
 > 
 > Dunno when it started happening, but it's in mainline now.
 > 
 > It's a pretty stupid error message.  line 20 of what?

2.6.18 -> 2.6.19 changes a bunch of netfilter config option names.
Sure you weren't bitten by that ?

		Dave

-- 
http://www.codemonkey.org.uk

Re: FC5 iptables-restore failure

From: Andrew Morton <akpm@linux-foundation.org>
Date: 2007-02-15 11:36:22

On Thu, 15 Feb 2007 06:20:22 -0500 Dave Jones [off-list ref] wrote:
On Thu, Feb 15, 2007 at 02:45:07AM -0800, Andrew Morton wrote:
 > 
 > I've recently been noticing nasty messages come out of FC5:
 > 
 > sony:/home/akpm# service iptables stop
 > Flushing firewall rules:                                   [  OK  ]
 > Setting chains to policy ACCEPT: filter                    [  OK  ]
 > Unloading iptables modules:                                [  OK  ]
 > sony:/home/akpm# service iptables start
 > Applying iptables firewall rules: iptables-restore: line 20 failed
 >                                                            [FAILED]
 > 
 > Dunno when it started happening, but it's in mainline now.
 > 
 > It's a pretty stupid error message.  line 20 of what?

2.6.18 -> 2.6.19 changes a bunch of netfilter config option names.
whee-lets-break-peoples-firewalls?
Sure you weren't bitten by that ?
Darned if I know.

Re: FC5 iptables-restore failure

From: Andrew Morton <akpm@linux-foundation.org>
Date: 2007-02-15 12:10:57

On Thu, 15 Feb 2007 06:20:22 -0500 Dave Jones [off-list ref] wrote:
On Thu, Feb 15, 2007 at 02:45:07AM -0800, Andrew Morton wrote:
 > 
 > I've recently been noticing nasty messages come out of FC5:
 > 
 > sony:/home/akpm# service iptables stop
 > Flushing firewall rules:                                   [  OK  ]
 > Setting chains to policy ACCEPT: filter                    [  OK  ]
 > Unloading iptables modules:                                [  OK  ]
 > sony:/home/akpm# service iptables start
 > Applying iptables firewall rules: iptables-restore: line 20 failed
 >                                                            [FAILED]
 > 
 > Dunno when it started happening, but it's in mainline now.
 > 
 > It's a pretty stupid error message.  line 20 of what?

2.6.18 -> 2.6.19 changes a bunch of netfilter config option names.
Sure you weren't bitten by that ?
Yeah, going and madly turning 1000 things on seemed to make it happy.

Re: FC5 iptables-restore failure

From: David Hollis <hidden>
Date: 2007-02-15 14:04:57

On Thu, 2007-02-15 at 04:10 -0800, Andrew Morton wrote:
On Thu, 15 Feb 2007 06:20:22 -0500 Dave Jones [off-list ref] wrote:
quoted
On Thu, Feb 15, 2007 at 02:45:07AM -0800, Andrew Morton wrote:
 > 
 > I've recently been noticing nasty messages come out of FC5:
 > 
 > sony:/home/akpm# service iptables stop
 > Flushing firewall rules:                                   [  OK  ]
 > Setting chains to policy ACCEPT: filter                    [  OK  ]
 > Unloading iptables modules:                                [  OK  ]
 > sony:/home/akpm# service iptables start
 > Applying iptables firewall rules: iptables-restore: line 20 failed
 >                                                            [FAILED]
 > 
 > Dunno when it started happening, but it's in mainline now.
 > 
 > It's a pretty stupid error message.  line 20 of what?

2.6.18 -> 2.6.19 changes a bunch of netfilter config option names.
Sure you weren't bitten by that ?
Yeah, going and madly turning 1000 things on seemed to make it happy.
If you ran system-config-securitylevel to do that, that probably made it
re-generate the /etc/sysconfig/iptables file which is dumped to
iptables.  

-- 
David Hollis [off-list ref]
Keyboard shortcuts
hback out one level
jnext message in thread
kprevious message in thread
ldrill in
Escclose help / fold thread tree
?toggle this help