Bug 136796
| Summary: | iptables initscript start() function logic might be wrong | ||
|---|---|---|---|
| Product: | [Fedora] Fedora | Reporter: | Sergey Benner <sig> |
| Component: | iptables | Assignee: | Thomas Woerner <twoerner> |
| Status: | CLOSED NOTABUG | QA Contact: | Ben Levenson <benl> |
| Severity: | low | Docs Contact: | |
| Priority: | medium | ||
| Version: | 3 | ||
| Target Milestone: | --- | ||
| Target Release: | --- | ||
| Hardware: | i386 | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | Bug Fix | |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2005-11-18 11:25:02 UTC | Type: | --- |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
The masquerading module will be loaded by iptables itself. This is no helper module. I do not know, what exactly you are trying to do. Closing due to user inactivity. |
From Bugzilla Helper: User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; X11; Linux i686) Opera 7.53 [en] Description of problem: The start() function of the script contains probably the broken logic. The script includes the /etc/sysconfig/iptables-config parameters. Additional modules so to say. In the current case it is IPTABLES_MODULES="". And the logic of the start() script loads these additional modules after the calling of $IPTABLES-restore $OPT $IPTABLES_DATA. Which results in the falure of the iptables-restore function. In my case it's ipt_MASQUERADE module. And the stored iptables isn't loaded the masquerading rules in this case. Because it loads the module after restoring. The solution is to moves the flollowing script block ------------ if [ -n "$IPTABLES_MODULES" ]; then echo -n $"Loading additional $IPTABLES modules: " ret=0 for mod in $IPTABLES_MODULES; do echo -n "$mod " modprobe $mod > /dev/null 2>&1 let ret+=$?; done [ $ret -eq 0 ] && success || failure echo fi ------------ before the - echo -n $"Applying $IPTABLES firewall rules: " - call Version-Release number of selected component (if applicable): iptables-1.2.11-3.1.i386 iptables-1.2.9-2.3.1 How reproducible: Always Steps to Reproduce: 1. 2. 3. Additional info: