Bug 109546

Summary: "service iptables save" minior issue
Product: [Fedora] Fedora Reporter: Daniel McNamara <daniel>
Component: iptablesAssignee: Thomas Woerner <twoerner>
Status: CLOSED RAWHIDE QA Contact: Ben Levenson <benl>
Severity: medium Docs Contact:
Priority: medium    
Version: 1CC: chris, teppo.turtiainen
Target Milestone: ---   
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: 1.2.9-1 Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2003-12-17 13:16:34 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Daniel McNamara 2003-11-09 08:32:11 UTC
From Bugzilla Helper:
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.5)
Gecko/20031007

Description of problem:
When making custom rules and getting them to save via the "service
iptables save" the ouput to /etc/sysconfig/iptables is not entirely
correct. The one specific example I have is:

Creating a custom set of firewall rules.

From the command line ran:

iptables -A INPUT -p icmp --icmp-type any -j ACCEPT

Then used "service iptables save"

Went to restart iptables and was presentted with:

Bad argument "any"

Checked /etc/sysconfig/iptables - Found the line had not been saved
correctly to be:

-A INPUT -p icmp -m icmp any -j ACCEPT

Version-Release number of selected component (if applicable):


How reproducible:
Always

Steps to Reproduce:
1. At the command line: iptables -A INPUT -p icmp --icmp-type any -j
ACCEPT
2. Run: service iptables save
3. Check contents of /etc/sysconfig/iptables file - Entry for the
above will be wrong
    

Actual Results:  iptables fails to start due to bug in saved config

Expected Results:  /etc/sysconfig/iptables should have contained the
correct line to allow firewall to come up correct

Additional info:

Comment 1 Michael Schwendt 2003-11-30 18:20:56 UTC
Confirmed. If this is not fixed in upstream code base, consider
submitting a bug report at http://bugzilla.netfilter.org/ too.

Comment 2 Thomas Woerner 2003-12-17 13:16:34 UTC
Fixed in rawhide.

Comment 3 Teppo Turtiainen 2004-01-01 22:16:36 UTC
*** Bug 112799 has been marked as a duplicate of this bug. ***