Tools for managing Linux kernel packet filtering capabilities
Go to file
Phil Sutter 948527f3fe Kill module unloading support
The whole concept is unfixably broken:

Some kernel modules are used by both IPv4 and IPv6 netfilter and the
algorithm has no way to identify this situation. Therefore if iptables
and ip6tables services are restarted in parallel, one's module unloading
tends to stomp onto the other's attempt at loading rules.

Another problem is with OVS: iptables service unloading conntrack
modules breaks a running OVS instance.
2018-02-28 08:18:43 +01:00
tests Initial checkin of tests from upstreamfirst project 2017-10-12 14:41:36 -04:00
.gitignore Update to 1.6.2 2018-02-21 16:55:57 -06:00
iptables-1.6.0-iptables-apply_mktemp.patch iMissing iptables-apply mktemp patch 2016-04-13 19:07:50 +02:00
iptables-config Kill module unloading support 2018-02-28 08:18:43 +01:00
iptables.init Kill module unloading support 2018-02-28 08:18:43 +01:00
iptables.service - New upstream version 1.6.0 with nft-compat support and lots of fixes (RHBZ#1292990) 2016-04-13 19:00:02 +02:00
iptables.spec Update to 1.6.2 2018-02-21 16:55:57 -06:00
sources Update to 1.6.2 2018-02-21 16:55:57 -06:00
sysconfig_ip6tables add dhcpv6-client to /etc/sysconfig/ip6tables (RHBZ#1169036) 2014-12-01 12:46:00 +01:00
sysconfig_iptables better comment in default /etc/sysconfig/ip[6]tables 2014-01-10 16:37:48 +01:00