FS#5735 - /etc/rc.d/iptables stop doesn't flush NAT table
Attached to Project:
Arch Linux
Opened by Roman Kyrylych (Romashka) - Thursday, 02 November 2006, 11:49 GMT
Last edited by Thomas Bächler (brain0) - Friday, 24 November 2006, 16:17 GMT
Opened by Roman Kyrylych (Romashka) - Thursday, 02 November 2006, 11:49 GMT
Last edited by Thomas Bächler (brain0) - Friday, 24 November 2006, 16:17 GMT
|
Details
/etc/rc.d/iptables has following lines in stop function:
$IPTABLES -F &>/dev/null && \ $IPTABLES -X &>/dev/null && \ $IPTABLES -Z &>/dev/null This does not flush all tables! (I've checked this) So iptables -t nat -F iptables -t mangle -F should be added. |
This task depends upon
Closed by Thomas Bächler (brain0)
Saturday, 10 February 2007, 10:13 GMT
Reason for closing: Fixed
Additional comments about closing: fixed in iptables 1.3.7-2
Saturday, 10 February 2007, 10:13 GMT
Reason for closing: Fixed
Additional comments about closing: fixed in iptables 1.3.7-2
Comment by Thomas Bächler (brain0) -
Friday, 24 November 2006, 16:18 GMT
Reopened: The new script doesn't work if any of the tables
(nat,mangle,filter) isn't present, we need to check
/proc/net/ip_tables_names.