Your message dated Tue, 29 Nov 2011 00:34:21 +0000
with message-id <[email protected]>
and subject line Bug#637852: fixed in iptables-persistent 0.5.3
has caused the Debian Bug report #637852,
regarding iptables-persistent: postinst does not check for iptables module
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
637852: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=637852
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: iptables-persistent
Version: 0.5.1-coolcold-1
Severity: important
Tags: patch
If ip_tables module is not loaded, so there is no /proc/net/ip_tables_names
file and so
iptables-save fails. This is almost okay except for the case where
configuration of
package occurs - installation is broken, like:
root@epsilon:~# apt-get install iptables-persistent
Reading package lists... Done
Building dependency tree
Reading state information... Done
The following packages were automatically installed and are no longer required:
libapt-pkg-perl
Use 'apt-get autoremove' to remove them.
The following NEW packages will be installed:
iptables-persistent
0 upgraded, 1 newly installed, 0 to remove and 56 not upgraded.
Need to get 7202B of archives.
After this operation, 90.1kB of additional disk space will be used.
Get:1 http://repo.coolcold.org lenny-coolcold/main iptables-persistent
0.5.1-coolcold-1 [7202B]
Fetched 7202B in 0s (183kB/s)
Preconfiguring packages ...
Selecting previously deselected package iptables-persistent.
(Reading database ... 44784 files and directories currently installed.)
Unpacking iptables-persistent (from
.../iptables-persistent_0.5.1-coolcold-1_all.deb) ...
Setting up iptables-persistent (0.5.1-coolcold-1) ...
iptables-save v1.4.2: Unable to open /proc/net/ip_tables_names: No such file or
directory
dpkg: error processing iptables-persistent (--configure):
subprocess post-installation script returned error exit status 1
Errors were encountered while processing:
iptables-persistent
E: Sub-process /usr/bin/dpkg returned an error code (1)
root@epsilon:~# iptables-save
iptables-save v1.4.2: Unable to open /proc/net/ip_tables_names: No such file or
directory
below is small patch which i believe should help.
Thanks in advance.
P.S. I've took iptables-persistent from
http://ftp.de.debian.org/debian/pool/main/i/iptables-persistent/iptables-persistent_0.5.1.tar.gz
and did backport to lenny (changed debhelper version dependancy in control file)
--- iptables-persistent.postinst 2011-03-05 12:19:23.000000000 +0000
+++ iptables-persistent.postinst.new 2011-03-25 17:09:35.000000000 +0000
@@ -16,11 +16,11 @@
if [ "x$RET" != "xtrue" ]; then
db_get iptables-persistent/autosave_v4 || true
if [ "x$RET" = "xtrue" ]; then
- iptables-save > /etc/iptables/rules.v4
+ iptables-save > /etc/iptables/rules.v4 || true
fi
db_get iptables-persistent/autosave_v6 || true
if [ "x$RET" = "xtrue" ]; then
- ip6tables-save > /etc/iptables/rules.v6
+ ip6tables-save > /etc/iptables/rules.v6 || true
fi
db_set iptables-persistent/autosave_done true || true
-- System Information:
Debian Release: 5.0.7
APT prefers oldstable
APT policy: (500, 'oldstable')
Architecture: amd64 (x86_64)
Kernel: Linux 2.6.32-bpo.5-amd64 (SMP w/2 CPU cores)
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968)
Shell: /bin/sh linked to /bin/bash
Versions of packages iptables-persistent depends on:
ii debconf [debconf-2.0] 1.5.24 Debian configuration management sy
ii iptables 1.4.2-6 administration tools for packet fi
ii lsb-base 3.2-20 Linux Standard Base 3.2 init scrip
iptables-persistent recommends no packages.
iptables-persistent suggests no packages.
-- debconf information:
* iptables-persistent/autosave_v6: true
* iptables-persistent/autosave_v4: true
--- End Message ---
--- Begin Message ---
Source: iptables-persistent
Source-Version: 0.5.3
We believe that the bug you reported is fixed in the latest version of
iptables-persistent, which is due to be installed in the Debian FTP archive:
iptables-persistent_0.5.3.dsc
to main/i/iptables-persistent/iptables-persistent_0.5.3.dsc
iptables-persistent_0.5.3.tar.gz
to main/i/iptables-persistent/iptables-persistent_0.5.3.tar.gz
iptables-persistent_0.5.3_all.deb
to main/i/iptables-persistent/iptables-persistent_0.5.3_all.deb
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Jonathan Wiltshire <[email protected]> (supplier of updated iptables-persistent
package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.8
Date: Mon, 28 Nov 2011 23:19:39 +0000
Source: iptables-persistent
Binary: iptables-persistent
Architecture: source all
Version: 0.5.3
Distribution: unstable
Urgency: low
Maintainer: Jonathan Wiltshire <[email protected]>
Changed-By: Jonathan Wiltshire <[email protected]>
Description:
iptables-persistent - boot-time loader for iptables rules
Closes: 637796 637852 645523 650001
Changes:
iptables-persistent (0.5.3) unstable; urgency=low
.
* [09d9ae] Check for loaded modules in postinst (Closes: #637852)
* [521544] Fix Default-Start and Default-Stop fields of the LSB header in
the init script. Thanks to Andreas Rütten (Closes: #650001)
* [d17b2f] Revert checking for loaded modules at startup, as this isn't
necessary in newer versions ip{,6}tables-restore - instead check that there
is a rules file to be loaded. Ensure at least ip{,6}table_filter is loaded
during save (Closes: #637796)
* [71aa52] Tidy formatting and spacing in iptables-persistent.init
* [3fe51a] Debconf translations to Spanish.
Thanks to Francisco Javier Cuadrado (Closes: #645523)
Checksums-Sha1:
957cc452aa0ed5cc595e56dbaffd8ce5954cdd7e 1624 iptables-persistent_0.5.3.dsc
c5666a2a2f1bef58aae98f5cdb5fa9c16fd59655 10879 iptables-persistent_0.5.3.tar.gz
703202bd6dbd912c08e5510fe745da2fbed004de 8666 iptables-persistent_0.5.3_all.deb
Checksums-Sha256:
079add4952fa4f25b18ba302746c3de6818d7e455972811bb798e0a0b2080f3f 1624
iptables-persistent_0.5.3.dsc
3e4de9720efc5cc1e2deabeab13dd0da914ade52098ba97e60ad8ae13583b386 10879
iptables-persistent_0.5.3.tar.gz
4cce0c44e37dc56ad7f5dda5980280422324ed9621c9934fbbf1965292bb6b46 8666
iptables-persistent_0.5.3_all.deb
Files:
5addecdec4a0beca4c52eb3b431a1a6c 1624 admin optional
iptables-persistent_0.5.3.dsc
e15182101dc563d50279dd7334216ea0 10879 admin optional
iptables-persistent_0.5.3.tar.gz
010d3661cb5e5c539ca9f7e44d903ad6 8666 admin optional
iptables-persistent_0.5.3_all.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)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=xsVu
-----END PGP SIGNATURE-----
--- End Message ---
