Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.

Bug 106589

Summary: Unloading iptables modules fails at "service iptables restart"
Product: [Retired] Red Hat Linux Reporter: Samuli Kärkkäinen <skarkkai-redhat-bugzilla>
Component: iptablesAssignee: Thomas Woerner <twoerner>
Status: CLOSED DUPLICATE QA Contact: Ben Levenson <benl>
Severity: medium Docs Contact:
Priority: medium    
Version: 7.3   
Target Milestone: ---   
Target Release: ---   
Hardware: athlon   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2006-02-21 18:59:02 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Samuli Kärkkäinen 2003-10-08 18:48:37 UTC 
When I do "service iptables restart" (or "service iptables start") I get
following output

Flushing firewall rules:                                   [  OK  ]
Setting chains to policy ACCEPT: filter                    [  OK  ]
Unloading iptables modules:

After which it sits there forever. "ps" shows that it's doing "modprobe -r
ip_conntrack_ftp". "lsmod" shows that it succeeds in unloading the module, or at
least in removing it from lsmod's listing. No error messages appear in the
syslog. Control-C doesn't kill the modprobe process, nor does even sending it
SIGKILL.

This didn't happen before I had updated to iptables-1.2.8-8.72.3. Kernel is
kernel-2.4.20-20.7. If I run the command immediately after booting the box, it
works alright, but fails repeatably when the box has been running for a while.

If, while the modprobe -r is still running, I do "insmod ip_conntrack_ftp", I
get the following errors:

/lib/modules/2.4.20-20.7/kernel/net/ipv4/netfilter/ip_conntrack_ftp.o:
unresolved symbol ip_conntrack_helper_unregister_Reea5a3fd
/lib/modules/2.4.20-20.7/kernel/net/ipv4/netfilter/ip_conntrack_ftp.o:
unresolved symbol ip_conntrack_helper_register_Ra22d6eb5
/lib/modules/2.4.20-20.7/kernel/net/ipv4/netfilter/ip_conntrack_ftp.o:
unresolved symbol ip_conntrack_expect_related_Rfc718b15
Comment 1 Thomas Woerner 2003-10-09 09:33:21 UTC 

*** This bug has been marked as a duplicate of 103177 ***
Comment 2 Red Hat Bugzilla 2006-02-21 18:59:02 UTC 
Changed to 'CLOSED' state since 'RESOLVED' has been deprecated.