Bug 101841

Summary: Extra 'iptables' string in /etc/sysconfig/iptables output
Product: Red Hat Enterprise Linux 3 Reporter: Steve Bonneville <sbonnevi>
Component: redhat-config-securitylevelAssignee: Brent Fox <bfox>
Status: CLOSED RAWHIDE QA Contact:
Severity: medium Docs Contact:
Priority: medium    
Version: 3.0Keywords: Security
Target Milestone: ---   
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2003-08-07 18:29:58 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
Example /etc/sysconfig/iptables file. none

Description Steve Bonneville 2003-08-07 15:04:54 UTC
Description of problem:

The new ruleset is written to /etc/sysconfig/iptables with several rules
prepended with the string 'iptables', which breaks the configuration (see
second example line):

   -A FORWARD -j RH-Firewall-1-INPUT
   iptables -A RH-Firewall-1-INPUT -i lo -j ACCEPT

The error on 'service iptables restart':

[root@as /]# service iptables restart
Flushing firewall rules:                                   [  OK  ]
Setting chains to policy ACCEPT: filter                    [  OK  ]
Unloading iptables modules:                                [  OK  ]
Applying iptables firewall rules: Bad argument `iptables'
Error occured at line: 10
Try `iptables-restore -h' or 'iptables-restore --help' for more information.
                                                           [FAILED]
[root@as /]#

Version-Release number of selected component (if applicable): 
1.2.0-1

How reproducible:  
Every time.  Run redhat-config-securitylevel and click 'Ok' to get the default
configuration.

Comment 1 Steve Bonneville 2003-08-07 15:06:08 UTC
Created attachment 93485 [details]
Example /etc/sysconfig/iptables file.

Comment 2 Bill Nottingham 2003-08-07 18:29:58 UTC
Fixed in 1.2.1-1.