Bug 54703 - Dependencies between /etc/sysconfig/network-scripts/ifup-post and /etc/sysconfig/iptables
Dependencies between /etc/sysconfig/network-scripts/ifup-post and /etc/syscon...
Product: Red Hat Linux
Classification: Retired
Component: basesystem (Show other bugs)
i586 Linux
medium Severity low
: ---
: ---
Assigned To: Bill Nottingham
Aaron Brown
Depends On:
  Show dependency treegraph
Reported: 2001-10-16 14:38 EDT by Matt
Modified: 2014-03-16 22:23 EDT (History)
1 user (show)

See Also:
Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of:
Last Closed: 2001-10-16 14:38:34 EDT
Type: ---
Regression: ---
Mount Type: ---
Documentation: ---
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---

Attachments (Terms of Use)

  None (edit)
Description Matt 2001-10-16 14:38:30 EDT
From Bugzilla Helper:
User-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)

Description of problem:
The /etc/rc.d/init.d/iptables depends on /etc/sysconfig/network-
scripts/ifup-post to allow dns traffic through the firewall roules. So if 
you call the iptables init script without rebooting then the ifup-post 
script will not be executed and the dns servers will not be allowed 
through the firewall rules.  aka DNS won't work.

Version-Release number of selected component (if applicable):

How reproducible:

Steps to Reproduce:

1. /etc/rc.d/init.d/iptables restart
2. Try to resolve any network names

Actual Results:  DNS names cannot be resolved and dig says server does not 

Expected Results:  DNS names should be resolved.

Additional info:
Comment 1 Bill Nottingham 2002-01-24 02:28:00 EST
ifup-post doesn't touch iptables at all. That code is there mainly for lokkit
and the like; we assume that custom firewalls would be written to allow DNS.

Note You need to log in before you can comment on or make changes to this bug.