topic Re: problems with iptables in Operating System - Linux

problems with iptables

NPI — Fri, 21 Apr 2006 07:18:05 GMT

Hello,

we have a problem that we don't understand from whom is genererated, so if anyone knows how to help...

When we shutdown our server, it hungs while trying to stop iptables services. It stays pending and if we want to shut down we have to do it manually (or by iLO).
Unfortunatly, as it is a quite important server we can't do many tries...

Details:
-it's a Proliant DL740 with RHAS4, named "nptux01".
It's the main node of a cluster of 46 nodes.
We have configured nptux01 to be the gateway of these nodes, as you can see from the configuration that I paste below (bond0 is the public interface, eth0 is the private interface
for all comunications, eth1 is a private interface dedicated to NFS)

Iptables configuration:
# Generated by iptables-save v1.2.5 on Thu Apr 3 20:54:13 2003
*filter
:FORWARD DROP [0:0]
:INPUT ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
-A FORWARD -m state -i bond0 -o eth0 --state ESTABLISHED,RELATED -j ACCEPT
-A FORWARD -i eth0 -o bond0 -j ACCEPT
-A FORWARD -m state -i bond0 -o eth1 --state ESTABLISHED,RELATED -j ACCEPT
-A FORWARD -i eth1 -o bond0 -j ACCEPT
-A FORWARD -j LOG
COMMIT
# Completed on Thu Apr 3 20:54:13 2003
# Generated by iptables-save v1.2.5 on Thu Apr 3 20:54:13 2003
*nat
:OUTPUT ACCEPT [0:0]
:PREROUTING ACCEPT [0:0]
:POSTROUTING ACCEPT [0:0]
-A POSTROUTING -o bond0 -j MASQUERADE
COMMIT
# Completed on Thu Apr 3 20:54:13 2003
# Generated by webmin
*mangle
:FORWARD ACCEPT [0:0]
:INPUT ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
:PREROUTING ACCEPT [0:0]
:POSTROUTING ACCEPT [0:0]
COMMIT
# Completed

-# uname -a
Linux nptux01 2.6.9-34.ELhugemem #1 SMP Fri Feb 24 17:04:34 EST 2006 i686 i686 i386 GNU/Linux

-# cat /etc/issue
Red Hat Enterprise Linux AS release 4 (Nahant Update 3)

-I attach the ooutput of dmesg

If you have questions, feel free to ask...

Thanks in advance,
Filippo

Re: problems with iptables

Steven E. Protter — Fri, 21 Apr 2006 07:30:40 GMT

Shalom Filippo,

I see nothing here to explain the behavior.

What run level is iptables started and stopped at?

SEP

Re: problems with iptables

Sergejs Svitnevs — Fri, 21 Apr 2006 07:57:32 GMT

Seems you have to update your kernel package.
According to:
https://rhn.redhat.com/errata/RHSA-2006-0132.html#Red%20Hat%20Enterprise%20Linux%20AS%20(v.%204)
,your kernel version has a Bug nr.165744.

https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=165744

I offer you to make the regular update of your affected system.

Regards,

Re: problems with iptables

NPI — Fri, 21 Apr 2006 08:36:41 GMT

# chkconfig --list iptables
iptables 0:off 1:off 2:on 3:on 4:on 5:on 6:off

We start the system at runlevel 3.

We'll try to update the kernel and do a reboot as soon as possible (not today...), to see if the solve the problem with that.

Thanks for the answerws: we'll make you know.

Filippo

Re: problems with iptables

Manuel Wolfshant — Fri, 21 Apr 2006 21:16:32 GMT

It looks like you have already applied the last kernel update (2.6.9-34).

It looks like you might need to reopen the bug, unless you have been hit by a different problem.