lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Date:	Thu, 15 Feb 2007 09:04:23 -0500
From:	David Hollis <dhollis@...ehollis.com>
To:	Andrew Morton <akpm@...ux-foundation.org>
Cc:	Dave Jones <davej@...hat.com>, netdev@...r.kernel.org
Subject: Re: FC5 iptables-restore failure

On Thu, 2007-02-15 at 04:10 -0800, Andrew Morton wrote:
> On Thu, 15 Feb 2007 06:20:22 -0500 Dave Jones <davej@...hat.com> wrote:
> 
> > On Thu, Feb 15, 2007 at 02:45:07AM -0800, Andrew Morton wrote:
> >  > 
> >  > I've recently been noticing nasty messages come out of FC5:
> >  > 
> >  > sony:/home/akpm# service iptables stop
> >  > Flushing firewall rules:                                   [  OK  ]
> >  > Setting chains to policy ACCEPT: filter                    [  OK  ]
> >  > Unloading iptables modules:                                [  OK  ]
> >  > sony:/home/akpm# service iptables start
> >  > Applying iptables firewall rules: iptables-restore: line 20 failed
> >  >                                                            [FAILED]
> >  > 
> >  > Dunno when it started happening, but it's in mainline now.
> >  > 
> >  > It's a pretty stupid error message.  line 20 of what?
> > 
> > 2.6.18 -> 2.6.19 changes a bunch of netfilter config option names.
> > Sure you weren't bitten by that ?
> 
> Yeah, going and madly turning 1000 things on seemed to make it happy.

If you ran system-config-securitylevel to do that, that probably made it
re-generate the /etc/sysconfig/iptables file which is dumped to
iptables.  

-- 
David Hollis <dhollis@...ehollis.com>

-
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html

Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ