Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 915090 - net-firewall/shorewall-5.2.8: shorewall6 restart error Couldn't load match `iface'
Summary: net-firewall/shorewall-5.2.8: shorewall6 restart error Couldn't load match `i...
Status: RESOLVED INVALID
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: Normal normal
Assignee: Gentoo Netmon project
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2023-10-02 23:24 UTC by Christophe PEREZ
Modified: 2023-10-06 21:09 UTC (History)
1 user (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Christophe PEREZ 2023-10-02 23:24:03 UTC
I can't restart shorewall6 anymore:

# rc-service shorewall6 restart
 * Stopping shorewall6 ...
Can't find library for match `iface'
ip6tables-restore v1.8.9 (legacy): Couldn't load match `iface':No such file or directory

Error occurred at line: 31
Try `ip6tables-restore -h' or 'ip6tables-restore --help' for more information.
   ERROR: /sbin/ip6tables-restore --wait 60 Failed.                                                         [ ok ]
 * Starting shorewall6 ...
   Shorewall is already running                                                                             [ ok ]

shorewall (ipv4) does not present a problem.

No error in configuration:

# shorewall6 check
Checking using Shorewall 5.2.8...
Processing /etc/shorewall6/params ...
Processing /etc/shorewall6/shorewall6.conf...
Compiling /etc/shorewall6/zones...
Compiling /etc/shorewall6/interfaces...
Determining Hosts in Zones...
Locating Action Files...
Compiling /etc/shorewall6/policy...
Compiling TCP Flags filtering...
Compiling MAC Filtration -- Phase 1...
Compiling /etc/shorewall6/rules...
Compiling MAC Filtration -- Phase 2...
Applying Policies...
Compiling /usr/share/shorewall/action.AllowICMPs for chain AllowICMPs...
Compiling /usr/share/shorewall/action.Broadcast for chain Broadcast...
Compiling /usr/share/shorewall/action.Multicast for chain Multicast...
Shorewall6 configuration verified

I can only find one reference to this issue on the internet https://github.com/weaveworks/weave/issues/3751
but this is what makes the link with xtables-addons which I installed recently.
Am I missing something in the kernel?
Comment 1 Christophe PEREZ 2023-10-06 21:09:00 UTC
Solved after recompiling xtables-addons with +xtables_addons_iface