Bug 33011
| Summary: | efw restart и stop неправильно работают с ipset | ||
|---|---|---|---|
| Product: | Sisyphus | Reporter: | Sergey Y. Afonin <asy> |
| Component: | etcnet | Assignee: | Mikhail Efremov <sem> |
| Status: | CLOSED FIXED | QA Contact: | qa-sisyphus |
| Severity: | normal | ||
| Priority: | P3 | CC: | ldv, mike, rider, sem, shaba |
| Version: | unstable | ||
| Hardware: | all | ||
| OS: | Linux | ||
В качестве времянки можно в .bashrc добавить alias efwrestart='efw stop ; efw stop ; efw start' alias efwstop='efw stop ; efw stop' Топорно, но работать будет. попробуйте efw отсюда: 'http://git.altlinux.org/people/sbolshakov/packages/etcnet.git?p=etcnet.git;a=blob_plain;f=etc/net/scripts/contrib/efw;h=e0fced3e4d50db57c6b276ade9ff7102782e0d3f;hb=47a246051c942057efa488541d00166dc0fdab2d' (In reply to comment #2) > попробуйте efw отсюда: делает вид, что работает. etcnet-0.9.12-alt1 -> sisyphus: Mon Jun 26 2017 Anton Farygin <rider@altlinux.ru> 0.9.12-alt1 - added network@.service for manage interfaces via systemctl (for example - systemctl enable network@eth0) (closes: #33588) - bonding: avoid autocreated bond0 iface by dshadrinov (closes: #33273) - efw: walk fw type list backward on stop by sbolshakov (closes: #33011) - weakening checks to enable empty bridge interfaces creation by naf (closes: #33295) |
Description
Sergey Y. Afonin 2017-01-17 23:25:09 MSK# efw restart Interface is "default" Table is "filter" Chain is "" Action is "restart" Firewall type is "ipset" Stopping ipset for default Destroying the "ahttpd" set of the "nethash" type ipset v6.29: Set cannot be destroyed: it is in use by a kernel component ERROR: /sbin/efw: /sbin/ipset -X ahttpd то есть, надо, сначала, "Stopping iptables for default", потом перезапустить ipset, потом "Starting iptables for default" Если ничего не править, вот так работает: efw stop ; efw stop ; efw start