Description of problem: After adding a service file for OSPF, IP works, but IPv6 prints error "ip6tables v1.4.19.1: unknown header `89' specified". Version-Release number of selected component (if applicable): firewalld-0.3.9.3-1.fc20.noarch How reproducible: synchronous Steps to Reproduce: 1. create a service file, cat <<EOF >/etc/firewall/services/ospf.xml <?xml version="1.0" encoding="utf-8"?> <service> <short>OSPF</short> <description>Link-state routing protocol</description> <port protocol="ospf" port=""/> <!-- <destination ipv6="::/0"/> --> <module name=""/> </service> EOF This is a universal file that enables both OSPF and OSPF v6. 2. firewall-cmd --reload 3. firewall-cmd --add-service=ospf Actual results: [root@simbelmyne quagga]# firewall-cmd --add-service=ospf Error: COMMAND_FAILED: '/sbin/ip6tables -A IN_public_allow -t filter -m ipv6header --header ospf -m conntrack --ctstate NEW -j ACCEPT' failed: ip6tables v1.4.19.1: unknown header `89' specified Try `ip6tables -h' or 'ip6tables --help' for more information. Expected results: success Additional info: It's some kind of difference between v4 and v6, the v4 works fine. A workaround currently used: firewall-cmd --direct --add-rule ipv6 filter INPUT 1 -p ospf -j ACCEPT
Thomas, let me know what do you think. https://git.fedorahosted.org/cgit/firewalld.git/commit/?id=5e0b34d6492109e5039cb367a97a1a4564a1c545
The proposed patch works for me. I applied it by hand to firewalld-0.3.12-1.fc20.noarch and firewalld-0.3.12-1.fc21.noarch.
firewalld-0.3.13-1.fc21 has been submitted as an update for Fedora 21. https://admin.fedoraproject.org/updates/firewalld-0.3.13-1.fc21
firewalld-0.3.13-1.fc20 has been submitted as an update for Fedora 20. https://admin.fedoraproject.org/updates/firewalld-0.3.13-1.fc20
Package firewalld-0.3.13-1.fc21: * should fix your issue, * was pushed to the Fedora 21 testing repository, * should be available at your local mirror within two days. Update it with: # su -c 'yum update --enablerepo=updates-testing firewalld-0.3.13-1.fc21' as soon as you are able to. Please go to the following url: https://admin.fedoraproject.org/updates/FEDORA-2014-16322/firewalld-0.3.13-1.fc21 then log in and leave karma (feedback).
firewalld-0.3.13-1.fc21 has been pushed to the Fedora 21 stable repository. If problems still persist, please make note of it in this bug report.
firewalld-0.3.13-1.fc20 has been pushed to the Fedora 20 stable repository. If problems still persist, please make note of it in this bug report.