Bug 847807 - ip_tables: REJECT target: only valid in filter table, not mangle
Summary: ip_tables: REJECT target: only valid in filter table, not mangle
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: Fedora
Classification: Fedora
Component: firewalld
Version: 18
Hardware: All
OS: Linux
unspecified
low
Target Milestone: ---
Assignee: Thomas Woerner
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2012-08-13 15:42 UTC by Jiri Popelka
Modified: 2013-02-15 12:19 UTC (History)
2 users (show)

Fixed In Version: firewalld-0.2.9-1.fc18
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2013-02-15 12:19:43 UTC
Type: Bug
Embargoed:

Attachments (Terms of Use)

Description Jiri Popelka 2012-08-13 15:42:37 UTC 
Version-Release number of selected component (if applicable):
firewalld-0.2.6-1.fc18.noarch
firewalld-0.2.7-1.fc18.noarch

Steps to Reproduce:
1. firewall-cmd --set-default-zone=block

Actual results:
Error: COMMAND_FAILED: '/sbin/iptables -A PREROUTING_ZONES -t mangle -i em1 -j REJECT --reject-with icmp-host-prohibited' failed: iptables: Invalid argument. Run `dmesg' for more information.

dmesg shows:
x_tables: ip_tables: REJECT target: only valid in filter table, not mangle


Neither iptables(8) nor Google tell me why REJECT target isn't valid but for example DROP seems to be valid.
Comment 1 Thomas Woerner 2012-10-04 15:31:12 UTC 
Fixed in GIT:

http://git.fedorahosted.org/cgit/firewalld.git/commit/?id=70a50157c49e65e049818f25b10d0a2500437847
Note You need to log in before you can comment on or make changes to this bug.