iptables-1.4.21-18.2.el7

The iptables utility controls the network packet filtering code in the Linux
kernel.

This update fixes the following bugs:

* Previously, at boot time or after running the "systemctl restart iptables ip6tables" command, the systemd service was running both iptables and ip6tables services in parallel. Due to the internal locking mechanism that prevented concurrent updates, one of the two services failed to start. This update adds the --wait option to the "iptables-restore" and "ip6tables-restore" commands to make them wait until the lock becomes free, and the described problem no longer occurs. (BZ#1481207)

* In Asianux Server 7.3, the iptables-services package contained a post-uninstall script that caused iptables, the ip6tables services, or both to restart. As a consequence, the current configuration was replaced with a manually saved configuration in the /etc/sysconfig/ip6tables file. This update removes the "service restart" command from the post-uninstall script. As a result, updates to the package do not cause a service restart. (BZ#1491961)

* Previously, when stopping iptables or ip6tables services, a script tried to unload the netfilter modules related to the given address family. Since there were modules that both address families used, a potential race condition created when both services restarted simultaneously. This update adds the AFTER and BEFORE keywords in the service files. As a result, both services run in sequence, and "systemctl restart iptables ip6tables" works as expected. (BZ#1491963)

Users of iptables are advised to upgrade to these updated packages, which fix
these bugs.