On 04/19/2017 03:55 PM, Kelley Trombly-Freytag wrote:
When I tried to add to my ipset, (firewall-cmd --permanent --ipset=groupips
--add-entry=XXX.XXX.XX.0/24)
I received the following error:
Error: IO_Object_XMLGenerator instance has no attribute '_out'
This subsequently made my ipset file empty, and as a result, I can not ssh into
the machine.
Can I just recreate the ipset file under /etc/firewalld/ipsets and try to
firewall-cmd --reload?
What is this error and how do I fix it?
I am currently running redhat release 7.2. Firewalld is at firewalld-0.4.3.2-8,
with
no yum updates outstanding.
Kelley Trombly-Freytag
I just tried this and had no problems on 7.2:
[root@csdev17 ipsets]# cat /etc/redhat-release
Scientific Linux release 7.2 (Nitrogen)
[root@csdev17 ipsets]# rpm -qa firewalld
firewalld-0.4.3.2-8.el7.noarch
[root@csdev17 ipsets]# firewall-cmd --permanent --new-ipset=groupips
--type=hash:net
success
[root@csdev17 ipsets]# firewall-cmd --permanent --ipset=groupips
--add-entry=192.168.3.0/24
success
With that said, you should be able to replace the xml file by hand and
reload your firewall.
-Mark