Your message dated Sat, 28 Feb 2026 10:04:01 +0000
with message-id <[email protected]>
and subject line Bug#1128686: fixed in iptables 1.8.12-2
has caused the Debian Bug report #1128686,
regarding iptables: virsh net-start no longer works: Failed to run firewall
command iptables -w --table filter --list-rules
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1128686: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1128686
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: libvirt-daemonVersion: 12.0.0-1
Severity: grave
I'm not sure I know exactly what's going on here. I marked this bug as grave at
it makes KVM completely unusable unless you don't use networking. I believe
Debian unstable moved from iptables to nftables a while ago, which broke
libvirt networking. I've been getting around that by using an older kernel
(6.17.x, don't remember exactly which one) but that stopped working after I
upgraded yesterday.
I get the following error when I try to start the default (NAT) network:
$ sudo virsh net-start default
error: Failed to start network default
error: internal error: Failed to run firewall command iptables -w --table
filter --list-rules:
Running that command manually I get:
$ sudo iptables -w --table filter --list-rules
modprobe: FATAL: Module ip_tables not found in directory
/lib/modules/6.18.12+deb14-rt-amd64
iptables v1.8.12 (legacy): can't initialize iptables table `filter': Table does
not exist (do you need to insmod?)
Perhaps iptables or your kernel needs to be upgraded.
Again, I'm not sure exactly what's going on here. It's possible this issue was
already reported, but I couldn't find it.
--- End Message ---
--- Begin Message ---
Source: iptables
Source-Version: 1.8.12-2
Done: Jeremy Sowden <[email protected]>
We believe that the bug you reported is fixed in the latest version of
iptables, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Jeremy Sowden <[email protected]> (supplier of updated iptables package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Fri, 27 Feb 2026 22:50:18 +0000
Source: iptables
Architecture: source
Version: 1.8.12-2
Distribution: unstable
Urgency: medium
Maintainer: Debian Netfilter Packaging Team
<[email protected]>
Changed-By: Jeremy Sowden <[email protected]>
Closes: 1128561 1128686 1129179
Changes:
iptables (1.8.12-2) unstable; urgency=medium
.
* [7742aa0] d/patches: revert libxtables refusal to run with capabilities
(Closes: #1128561, #1128686, #1129179)
Checksums-Sha1:
d5ce290dbe99b6c65876c16b45ee96af747da84d 3032 iptables_1.8.12-2.dsc
fb0fc313d082f3704dd5e237d49d407cb993322d 29476 iptables_1.8.12-2.debian.tar.xz
c47c9397d2b9b912e76ac1927601d44dd7550d27 9792 iptables_1.8.12-2_amd64.buildinfo
Checksums-Sha256:
bea35aecf8ac5ff37d2d99547cbbcde9c688969b09ac2bbf49aead393ab16203 3032
iptables_1.8.12-2.dsc
847d8e9cc3130ed51d4bb447e1f1ec3a101f3e74ca1f4cd4b4abb4af3eccd50d 29476
iptables_1.8.12-2.debian.tar.xz
3f8263bc048f09464f4fb438bd11a518205a9412e418e0871ab77d18c71fe48a 9792
iptables_1.8.12-2_amd64.buildinfo
Files:
b290b548927990d1dfc2a16f91bbae4a 3032 net optional iptables_1.8.12-2.dsc
22225e1905d7321c369a5ef2c08d0187 29476 net optional
iptables_1.8.12-2.debian.tar.xz
6770eb7c61f951670523843bba643845 9792 net optional
iptables_1.8.12-2_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=QCSh
-----END PGP SIGNATURE-----
pgpvfJTD7WXWS.pgp
Description: PGP signature
--- End Message ---
