Re: Does --disable-ipv6 fully work in 3.0.1?
Phil Whineray <[email protected]> Tue, 12 Apr 2016 21:40:12 +0100
| Newsgroups | gmane.comp.security.firewalls.firehol.user |
|---|---|
| Message-ID | <[email protected]> |
Hi On Tue, Apr 12, 2016 at 09:17:26AM -0400, Whit Blauvelt wrote: > A question with 3.0.1. Just built it on an Ubuntu 12.04 system, which went > okay after disabling vnetbuild. But: > > # firehol start > FireHOL: Saving active firewall to a temporary file... /sbin/ip6tables-save: symbol lookup error: /sbin/ip6tables-save: undefined symbol: ipv6_prefix_length > FAILED > 2016 Apr 12 09:08:29 ... FAILED to activate the firewall from /etc/firehol/firehol.conf. Last good firewall restoration: NO. > > So I rebuilt after "make clean" and also adding "--disable-ipv6". But the > error persists. > > Should FireHOL be trying to use ip6tables-save when I don't in any context > use ipv6 and firehol has been built without support for it? No it shouldn't. Could you check /etc/firehol/firehol-defaults.conf and if that's not the problem, try to track down how $ENABLE_IPV6 wound up as "1" with bash -x, since a test wraps the command in question. Cheers Phil _______________________________________________ Firehol-support mailing list [email protected] http://lists.firehol.org/mailman/listinfo/firehol-support