+++ This bug was initially created as a clone of Bug #1488492 +++ Description of problem: Unable to use jump following https://forge.puppet.com/puppetlabs/firewall Version-Release number of selected component (if applicable): puppet-tripleo-5.6.1-2.el7ost.noarch How reproducible: try to deploy this rule : '410 allow marking': port: 10051 proto: tcp source: 10.0.0.8 extra: { table: mangle, jump: dscp, set_dscp: 12 } It's fail cause action is by default ACCEPT. Bug lanchpad : https://bugs.launchpad.net/tripleo/+bug/1669763
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2017:3098