Public bug reported:
ip6tables is not properly setup for the nft backend.
$ sudo update-alternatives --query ip6tables
Name: ip6tables
Link: /usr/sbin/ip6tables
Slaves:
ip6tables-restore /usr/sbin/ip6tables-restore
ip6tables-save /usr/sbin/ip6tables-save
Status: auto
Best: /usr/sbin/ip6tables-legacy
Value: /usr/sbin/ip6tables-legacy
Alternative: /usr/sbin/ip6tables-legacy
Priority: 20
Slaves:
ip6tables-restore /usr/sbin/ip6tables-legacy-restore
ip6tables-save /usr/sbin/ip6tables-legacy-save
Alternative: /usr/sbin/ip6tables-nft
Priority: 10
Slaves:
ip6tables-restore /usr/sbin/ip6tables-nft-restore
ip6tables-save /usr/sbin/ip6tables-nft-save
But, looking at the files in /usr/sbin, /usr/sbin/ip6tables is not a symlink
into /etc/alternatives/ip6tables:
$ ls -l /usr/sbin/ip6tables
-rwxr-xr-x 1 root root 99296 Feb 28 08:16 /usr/sbin/ip6tables
but the symlink in /etc/alternatives is setup ok:
$ ls -l /etc/alternatives/ip6tables
lrwxrwxrwx 1 root root 26 Mar 2 10:12 /etc/alternatives/ip6tables ->
/usr/sbin/ip6tables-legacy
This breaks, for example, ufw when the system is setup for nft.
** Affects: iptables (Ubuntu)
Importance: Medium
Assignee: Jamie Strandboge (jdstrand)
Status: In Progress
** Changed in: iptables (Ubuntu)
Status: New => Triaged
** Changed in: iptables (Ubuntu)
Assignee: (unassigned) => Jamie Strandboge (jdstrand)
** Changed in: iptables (Ubuntu)
Status: Triaged => In Progress
** Changed in: iptables (Ubuntu)
Importance: Undecided => Medium
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1865531
Title:
ip6tables alternate is not setup correctly
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/iptables/+bug/1865531/+subscriptions
--
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
