netdev.vger.kernel.org archive mirror
 help / color / mirror / Atom feed
* FC5 iptables-restore failure
@ 2007-02-15 10:45 Andrew Morton
  2007-02-15 11:20 ` Dave Jones
  0 siblings, 1 reply; 5+ messages in thread
From: Andrew Morton @ 2007-02-15 10:45 UTC (permalink / raw)
  To: netdev


I've recently been noticing nasty messages come out of FC5:

sony:/home/akpm# service iptables stop
Flushing firewall rules:                                   [  OK  ]
Setting chains to policy ACCEPT: filter                    [  OK  ]
Unloading iptables modules:                                [  OK  ]
sony:/home/akpm# service iptables start
Applying iptables firewall rules: iptables-restore: line 20 failed
                                                           [FAILED]

Dunno when it started happening, but it's in mainline now.

It's a pretty stupid error message.  line 20 of what?

sony:/home/akpm# rpm -q iptables
iptables-1.3.5-1.2

^ permalink raw reply	[flat|nested] 5+ messages in thread

* Re: FC5 iptables-restore failure
  2007-02-15 10:45 FC5 iptables-restore failure Andrew Morton
@ 2007-02-15 11:20 ` Dave Jones
  2007-02-15 11:36   ` Andrew Morton
  2007-02-15 12:10   ` Andrew Morton
  0 siblings, 2 replies; 5+ messages in thread
From: Dave Jones @ 2007-02-15 11:20 UTC (permalink / raw)
  To: Andrew Morton; +Cc: netdev

On Thu, Feb 15, 2007 at 02:45:07AM -0800, Andrew Morton wrote:
 > 
 > I've recently been noticing nasty messages come out of FC5:
 > 
 > sony:/home/akpm# service iptables stop
 > Flushing firewall rules:                                   [  OK  ]
 > Setting chains to policy ACCEPT: filter                    [  OK  ]
 > Unloading iptables modules:                                [  OK  ]
 > sony:/home/akpm# service iptables start
 > Applying iptables firewall rules: iptables-restore: line 20 failed
 >                                                            [FAILED]
 > 
 > Dunno when it started happening, but it's in mainline now.
 > 
 > It's a pretty stupid error message.  line 20 of what?

2.6.18 -> 2.6.19 changes a bunch of netfilter config option names.
Sure you weren't bitten by that ?

		Dave

-- 
http://www.codemonkey.org.uk

^ permalink raw reply	[flat|nested] 5+ messages in thread

* Re: FC5 iptables-restore failure
  2007-02-15 11:20 ` Dave Jones
@ 2007-02-15 11:36   ` Andrew Morton
  2007-02-15 12:10   ` Andrew Morton
  1 sibling, 0 replies; 5+ messages in thread
From: Andrew Morton @ 2007-02-15 11:36 UTC (permalink / raw)
  To: Dave Jones; +Cc: netdev

On Thu, 15 Feb 2007 06:20:22 -0500 Dave Jones <davej@redhat.com> wrote:

> On Thu, Feb 15, 2007 at 02:45:07AM -0800, Andrew Morton wrote:
>  > 
>  > I've recently been noticing nasty messages come out of FC5:
>  > 
>  > sony:/home/akpm# service iptables stop
>  > Flushing firewall rules:                                   [  OK  ]
>  > Setting chains to policy ACCEPT: filter                    [  OK  ]
>  > Unloading iptables modules:                                [  OK  ]
>  > sony:/home/akpm# service iptables start
>  > Applying iptables firewall rules: iptables-restore: line 20 failed
>  >                                                            [FAILED]
>  > 
>  > Dunno when it started happening, but it's in mainline now.
>  > 
>  > It's a pretty stupid error message.  line 20 of what?
> 
> 2.6.18 -> 2.6.19 changes a bunch of netfilter config option names.

whee-lets-break-peoples-firewalls?

> Sure you weren't bitten by that ?

Darned if I know.

^ permalink raw reply	[flat|nested] 5+ messages in thread

* Re: FC5 iptables-restore failure
  2007-02-15 11:20 ` Dave Jones
  2007-02-15 11:36   ` Andrew Morton
@ 2007-02-15 12:10   ` Andrew Morton
  2007-02-15 14:04     ` David Hollis
  1 sibling, 1 reply; 5+ messages in thread
From: Andrew Morton @ 2007-02-15 12:10 UTC (permalink / raw)
  To: Dave Jones; +Cc: netdev

On Thu, 15 Feb 2007 06:20:22 -0500 Dave Jones <davej@redhat.com> wrote:

> On Thu, Feb 15, 2007 at 02:45:07AM -0800, Andrew Morton wrote:
>  > 
>  > I've recently been noticing nasty messages come out of FC5:
>  > 
>  > sony:/home/akpm# service iptables stop
>  > Flushing firewall rules:                                   [  OK  ]
>  > Setting chains to policy ACCEPT: filter                    [  OK  ]
>  > Unloading iptables modules:                                [  OK  ]
>  > sony:/home/akpm# service iptables start
>  > Applying iptables firewall rules: iptables-restore: line 20 failed
>  >                                                            [FAILED]
>  > 
>  > Dunno when it started happening, but it's in mainline now.
>  > 
>  > It's a pretty stupid error message.  line 20 of what?
> 
> 2.6.18 -> 2.6.19 changes a bunch of netfilter config option names.
> Sure you weren't bitten by that ?

Yeah, going and madly turning 1000 things on seemed to make it happy.

^ permalink raw reply	[flat|nested] 5+ messages in thread

* Re: FC5 iptables-restore failure
  2007-02-15 12:10   ` Andrew Morton
@ 2007-02-15 14:04     ` David Hollis
  0 siblings, 0 replies; 5+ messages in thread
From: David Hollis @ 2007-02-15 14:04 UTC (permalink / raw)
  To: Andrew Morton; +Cc: Dave Jones, netdev

On Thu, 2007-02-15 at 04:10 -0800, Andrew Morton wrote:
> On Thu, 15 Feb 2007 06:20:22 -0500 Dave Jones <davej@redhat.com> wrote:
> 
> > On Thu, Feb 15, 2007 at 02:45:07AM -0800, Andrew Morton wrote:
> >  > 
> >  > I've recently been noticing nasty messages come out of FC5:
> >  > 
> >  > sony:/home/akpm# service iptables stop
> >  > Flushing firewall rules:                                   [  OK  ]
> >  > Setting chains to policy ACCEPT: filter                    [  OK  ]
> >  > Unloading iptables modules:                                [  OK  ]
> >  > sony:/home/akpm# service iptables start
> >  > Applying iptables firewall rules: iptables-restore: line 20 failed
> >  >                                                            [FAILED]
> >  > 
> >  > Dunno when it started happening, but it's in mainline now.
> >  > 
> >  > It's a pretty stupid error message.  line 20 of what?
> > 
> > 2.6.18 -> 2.6.19 changes a bunch of netfilter config option names.
> > Sure you weren't bitten by that ?
> 
> Yeah, going and madly turning 1000 things on seemed to make it happy.

If you ran system-config-securitylevel to do that, that probably made it
re-generate the /etc/sysconfig/iptables file which is dumped to
iptables.  

-- 
David Hollis <dhollis@davehollis.com>


^ permalink raw reply	[flat|nested] 5+ messages in thread

end of thread, other threads:[~2007-02-15 14:04 UTC | newest]

Thread overview: 5+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2007-02-15 10:45 FC5 iptables-restore failure Andrew Morton
2007-02-15 11:20 ` Dave Jones
2007-02-15 11:36   ` Andrew Morton
2007-02-15 12:10   ` Andrew Morton
2007-02-15 14:04     ` David Hollis

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).