Red Hat Bugzilla – Bug 109546
"service iptables save" minior issue
Last modified: 2007-11-30 17:10:33 EST
From Bugzilla Helper:
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.5)
Description of problem:
When making custom rules and getting them to save via the "service
iptables save" the ouput to /etc/sysconfig/iptables is not entirely
correct. The one specific example I have is:
Creating a custom set of firewall rules.
From the command line ran:
iptables -A INPUT -p icmp --icmp-type any -j ACCEPT
Then used "service iptables save"
Went to restart iptables and was presentted with:
Bad argument "any"
Checked /etc/sysconfig/iptables - Found the line had not been saved
correctly to be:
-A INPUT -p icmp -m icmp any -j ACCEPT
Version-Release number of selected component (if applicable):
Steps to Reproduce:
1. At the command line: iptables -A INPUT -p icmp --icmp-type any -j
2. Run: service iptables save
3. Check contents of /etc/sysconfig/iptables file - Entry for the
above will be wrong
Actual Results: iptables fails to start due to bug in saved config
Expected Results: /etc/sysconfig/iptables should have contained the
correct line to allow firewall to come up correct
Confirmed. If this is not fixed in upstream code base, consider
submitting a bug report at http://bugzilla.netfilter.org/ too.
Fixed in rawhide.
*** Bug 112799 has been marked as a duplicate of this bug. ***