エラータID: AXBA:2017-2356:02

2017/10/24 Tuesday - 11:07
Asianux Server 7 for x86_64

The iptables utility controls the network packet filtering code in the Linux

This update fixes the following bugs:

* Previously, at boot time or after running the "systemctl restart iptables ip6tables" command, the systemd service was running both iptables and ip6tables services in parallel. Due to the internal locking mechanism that prevented concurrent updates, one of the two services failed to start. This update adds the --wait option to the "iptables-restore" and "ip6tables-restore" commands to make them wait until the lock becomes free, and the described problem no longer occurs. (BZ#1481207)

* In Asianux Server 7.3, the iptables-services package contained a post-uninstall script that caused iptables, the ip6tables services, or both to restart. As a consequence, the current configuration was replaced with a manually saved configuration in the /etc/sysconfig/ip6tables file. This update removes the "service restart" command from the post-uninstall script. As a result, updates to the package do not cause a service restart. (BZ#1491961)

* Previously, when stopping iptables or ip6tables services, a script tried to unload the netfilter modules related to the given address family. Since there were modules that both address families used, a potential race condition created when both services restarted simultaneously. This update adds the AFTER and BEFORE keywords in the service files. As a result, both services run in sequence, and "systemctl restart iptables ip6tables" works as expected. (BZ#1491963)

Users of iptables are advised to upgrade to these updated packages, which fix
these bugs.


Update packages.




  1. iptables-1.4.21-18.2.el7.src.rpm
    MD5: 7d3cb102c8e6c6c48566d20aa8478315
    SHA-256: b79a9692e91d680d71d2ac59278e45e565af656ffed2189d0d75d6f72d2e2cf7
    Size: 620.82 kB

Asianux Server 7 for x86_64
  1. iptables-1.4.21-18.2.el7.x86_64.rpm
    MD5: 023c085b02e8f7622fa78a7ed56c8648
    SHA-256: bcb81289a129647f8d952126e7259c1522be3e74b52dd025ad238a23500380fb
    Size: 427.41 kB
  2. iptables-devel-1.4.21-18.2.el7.x86_64.rpm
    MD5: bbfaa2c4b15f64dff324a58c0143ab3d
    SHA-256: 4c12bb4bd90df33e047c0eef26962d4beb6ed508802dc33ed305956cbee2596b
    Size: 53.68 kB
  3. iptables-services-1.4.21-18.2.el7.x86_64.rpm
    MD5: b4d940b9d9a0d739c752456448fd8188
    SHA-256: 5015db6c349560b9e119c067b248faa8ede77433460d55575051df122b196c14
    Size: 49.83 kB
  4. iptables-1.4.21-18.2.el7.i686.rpm
    MD5: 95dd2c16488a71d272ca637b9d3e209b
    SHA-256: b7e9e5515188d6b2525265a341bbb57fcb0359b7f40bb676f645bace0d1ad18b
    Size: 418.39 kB
  5. iptables-devel-1.4.21-18.2.el7.i686.rpm
    MD5: 4239e19e3db7afcbccfa094ce6f7bf78
    SHA-256: 45e1c9a41c395e36ca06acb15c8c923cd12b592db01535bcf381b1ab73031530
    Size: 53.69 kB