Red Hat Bugzilla – Bug 1314962
iptables-services package dependency issue
Last modified: 2016-07-01 06:04:11 EDT
User-Agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:44.0) Gecko/20100101 Firefox/44.0
iptables-services is dependent on policycoreutils.
If policycoreutils is not installed, iptables-services does not function correctly. Rules are not saved automatically or manually, as shown below:
# service iptables save
iptables: Saving firewall rules to /etc/sysconfig/iptables: /usr/libexec/iptables/iptables.init: line 315: restorecon: command not found
However the yum packages do not reflect this dependency and it is possible to install iptables-services without installing policycoreutils. This causes some frustration, since iptables-services loads rules from defaults on boot, which blocks most incoming traffic. It is also difficult to determine the cause of the problem through systemctl status.
Installing policycoreutils fixes the problem.
Steps to Reproduce:
1. Don't install policycoreutils
2. Install iptables-services
3. Notice that iptables and ip6tables are not persistent
4. Notice that rules cannot be saved manually either
5. Install policycoreutils
6. Notice that everything works now
Bug originally filed against CentOS here:
*** This bug has been marked as a duplicate of bug 1246380 ***