Arch Linux

Please read this before reporting a bug:
https://wiki.archlinux.org/title/Bug_reporting_guidelines

Do NOT report bugs when a package is just outdated, or it is in the AUR. Use the 'flag out of date' link on the package page, or the Mailing List.

REPEAT: Do NOT report bugs for outdated packages!
Tasklist

FS#5884 - iptables init script fails while stopping

Attached to Project: Arch Linux
Opened by Markus Engel (mrks) - Friday, 24 November 2006, 15:44 GMT
Task Type Bug Report
Category Packages: Current
Status Closed
Assigned To No-one
Architecture not specified
Severity Low
Priority Normal
Reported Version 0.7.2 Gimmick
Due in Version Undecided
Due Date Undecided
Percent Complete 100%
Votes 0
Private No

Details

The /etc/rc.d/iptables script fails while stopping.
The script tries to flush, zero and delete all user-defined chains from the tables filter, nat, mangle and raw, presuming all of these exsist.
The following effect is, that starting iptables again fails, too, because the /var/run/iptables file is not removed then.

It would be better to read /proc/net/ip_tables_names to get the names of the tables which are actually in use (and known by the kernel).

Furthermore, for the default policies, we could lookup the names of the chains of each table, using iptables -t $T -n -L and some grep/sed/whatever command to filter them out, so we could set the default policy to ACCEPT of each tables' chain without "hardcoding" all the names in the script.
This task depends upon

Closed by  Roman Kyrylych (Romashka)
Friday, 24 November 2006, 16:46 GMT
Reason for closing:  Duplicate
Additional comments about closing:  http://bugs.archlinux.org/task/5735 is now reopened.
Comment by Roman Kyrylych (Romashka) - Friday, 24 November 2006, 16:44 GMT
stopping/starting iptables works fine for me.
However I agree with some of your points.
Comment by Markus Engel (mrks) - Friday, 24 November 2006, 17:00 GMT
Oh, I didn't want to say it doesn't work for all...
It surely works at least for those, who use a kernel from the repositories.
However, my kernel does not know anything about mangle or raw table (I don't even have compiled those as modules) so the script fails for me and for all those, who have some similar kernel configuration.

I guess that another downside of this issue is, that the script (or better: iptables) would load the appropriate modules when I stop /etc/rc.d/iptables, if the modules would exist.

Loading...