Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 796707 - net-firewall/nfacct: needs init script to save/restore counters with iptables
Summary: net-firewall/nfacct: needs init script to save/restore counters with iptables
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: Gentoo Netmon project
URL:
Whiteboard:
Keywords: PullRequest
Depends on:
Blocks:
 
Reported: 2021-06-19 08:13 UTC by Christian Zuckschwerdt
Modified: 2021-12-03 01:19 UTC (History)
2 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Christian Zuckschwerdt 2021-06-19 08:13:44 UTC
The net-firewall/nfacct package needs an initscript to save and restore nfacct accounting objects.

All accounting objects need to be present before iptables can be started/restored if the nfacct module is used in some iptables rules.

E.g. `nfacct add ipv4` otherwise `iptables -I INPUT -m nfacct --nfacct-name ipv4` fails.

Reproducible: Always

Steps to Reproduce:
1. Have iptables (ip6tables) in a runlevel
2. Run `nfacct add ipv4 ; iptables -I INPUT -m nfacct --nfacct-name ipv4`
3. Restart the machine 

Actual Results:  
iptables won't start

Expected Results:  
iptables should start

A working init script for nfacct is in https://github.com/gentoo/gentoo/pull/21237
Comment 1 Christian Zuckschwerdt 2021-11-29 10:35:07 UTC
Sorry to bump this, anything else needed? Is there a process or someone to ping?
Comment 2 Larry the Git Cow gentoo-dev 2021-12-03 00:12:27 UTC
The bug has been closed via the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=18bb804ba9d4daf364b9e740735b8576f6c78e76

commit 18bb804ba9d4daf364b9e740735b8576f6c78e76
Author:     Christian W. Zuckschwerdt <christian@zuckschwerdt.org>
AuthorDate: 2021-06-14 15:57:55 +0000
Commit:     Sam James <sam@gentoo.org>
CommitDate: 2021-12-03 00:05:40 +0000

    net-firewall/nfacct: add init script
    
    Closes: https://bugs.gentoo.org/796707
    Signed-off-by: Christian W. Zuckschwerdt <christian@zuckschwerdt.org>
    Closes: https://github.com/gentoo/gentoo/pull/21237
    Signed-off-by: Sam James <sam@gentoo.org>

 net-firewall/nfacct/files/nfacct.confd             |  7 ++++
 net-firewall/nfacct/files/nfacct.initd             | 42 ++++++++++++++++++++++
 ...{nfacct-1.0.2.ebuild => nfacct-1.0.2-r1.ebuild} |  8 +++++
 3 files changed, 57 insertions(+)