From Bugzilla Helper: User-Agent: Mozilla/4.0 (compatible; MSIE 5.5; Windows NT 5.0) The iptables init script uses ipchains to flush the existing chains in the start sequence. ipchains does not work with kernel 2.4. The init script also calls iptables-restore -f -p. iptables-restore does not accept those options. Reproducible: Always Steps to Reproduce: 1.touch /etc/sysconfig/iptables 2.service start iptables 3. Actual Results: ipchains: Incompatible with this kernel /sbin/iptables-restore: invalid option -- p /sbin/iptables-restore: invalid option -- f Expected Results: iptables should be used to flush existing chains in the start sequence. iptables-restore should not be passed any options.
We (Red Hat) should really try to resolve this before next release.
Fixed in iptables-1.2.0-8 ipchains-restore will be called with paramater -c to save counters.