Red Hat Bugzilla – Bug 1285769
Fails to start without ip6t_rpfilter module
Last modified: 2016-11-03 17:01:33 EDT
I recently ran into bug #1074427 when trying to use RHEL7 firewalld inside OpenVZ guest. The OpenVZ kernel is missing the ip6t_rpfilter module which results in firewalld failing before completing initialization, resulting in unreachable machine.
Would it be possible to backport the patch to RHEL7?
Affected version: firewalld-0.3.9-11.el7.noarch
Fixed upstream in
This bug was accidentally moved from POST to MODIFIED via an error in automation, please see firstname.lastname@example.org with any questions
failed firewalld-0.4.3.2-6.el7.noarch (incomplete fix)
the new version (fully) starts only when IndividualCalls=yes option is used
What happens however is disturbing, because the process is running (process list & systemd) but returns --state of 252 - not running. --list-all command succeeds.
iptables-save contains same same rules in both IndividualCalls variants.
Here is an upstream fix:
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.
For information on the advisory, and where to find the updated
files, follow the link below.
If the solution does not work for you, open a new bug report.