[Bug 500990] iptables-batch doesn't commit at the end (can't stop SuSEfirewall)
http://bugzilla.novell.com/show_bug.cgi?id=500990 User puzel@novell.com added comment http://bugzilla.novell.com/show_bug.cgi?id=500990#c11 Petr Uzel <puzel@novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|ASSIGNED |NEEDINFO Info Provider| |lnussel@novell.com --- Comment #11 from Petr Uzel <puzel@novell.com> 2009-05-07 06:18:13 MDT --- (In reply to comment #10)
it's iptables-batch indeed. Petr, you have removed the final do_commit call. There should be a if(ret) ret = do_commit();
right before exit from main
I've removed it for two reasons: a) I didn't understand why it was there - I thought the rules are committed if and only if the input contains 'commit' command, in which case the do_commit() call is issued. If I'm not mistaken, the do_commit() call I've removed caused that the rules were committed even without 'commit' command in the input. So how this should behave? b) Because of the libiptc internal changes, issuing do_commit() twice produced some errors (this should be easy to fix). -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
participants (1)
-
bugzilla_noreply@novell.com