Bug 915090

Summary:	net-firewall/shorewall-5.2.8: shorewall6 restart error Couldn't load match `iface'
Product:	Gentoo Linux	Reporter:	Christophe PEREZ <chris>
Component:	Current packages	Assignee:	Gentoo Netmon project <netmon>
Status:	RESOLVED INVALID
Severity:	normal	CC:	jstein
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---

Description Christophe PEREZ 2023-10-02 23:24:03 UTC

I can't restart shorewall6 anymore:

# rc-service shorewall6 restart
 * Stopping shorewall6 ...
Can't find library for match `iface'
ip6tables-restore v1.8.9 (legacy): Couldn't load match `iface':No such file or directory

Error occurred at line: 31
Try `ip6tables-restore -h' or 'ip6tables-restore --help' for more information.
   ERROR: /sbin/ip6tables-restore --wait 60 Failed.                                                         [ ok ]
 * Starting shorewall6 ...
   Shorewall is already running                                                                             [ ok ]

shorewall (ipv4) does not present a problem.

No error in configuration:

# shorewall6 check
Checking using Shorewall 5.2.8...
Processing /etc/shorewall6/params ...
Processing /etc/shorewall6/shorewall6.conf...
Compiling /etc/shorewall6/zones...
Compiling /etc/shorewall6/interfaces...
Determining Hosts in Zones...
Locating Action Files...
Compiling /etc/shorewall6/policy...
Compiling TCP Flags filtering...
Compiling MAC Filtration -- Phase 1...
Compiling /etc/shorewall6/rules...
Compiling MAC Filtration -- Phase 2...
Applying Policies...
Compiling /usr/share/shorewall/action.AllowICMPs for chain AllowICMPs...
Compiling /usr/share/shorewall/action.Broadcast for chain Broadcast...
Compiling /usr/share/shorewall/action.Multicast for chain Multicast...
Shorewall6 configuration verified

I can only find one reference to this issue on the internet https://github.com/weaveworks/weave/issues/3751
but this is what makes the link with xtables-addons which I installed recently.
Am I missing something in the kernel?

Comment 1 Christophe PEREZ 2023-10-06 21:09:00 UTC

Solved after recompiling xtables-addons with +xtables_addons_iface