Skip to content

GitLab

Closed
Created by Alessandro Musso@musso

Awall with Alpine 2.5

I have a simple policy like
{
“description”: “Base Policy”,
“variable”: {“ADDRS”: [ “192.168.1.0/24” ]},
“zone”: {“Z1”: { “iface”: “eth1”, “addr”: “$ADDRS” }},
“policy”: [
{ “in”: “_fw”, “action”: “accept” },
{ “in”: “Z1”, “out”: “_fw”, “action”: “accept” },
{ “action”: “drop”, “log”: false }
]
}

when i do awall activate, iptable warn me:
Warning: inet6 rules not tested
WARNING: The state match is obsolete. Use conntrack instead.
WARNING: The state match is obsolete. Use conntrack instead.
WARNING: The state match is obsolete. Use conntrack instead.
WARNING: The state match is obsolete. Use conntrack instead.
WARNING: The state match is obsolete. Use conntrack instead.
WARNING: The state match is obsolete. Use conntrack instead.

This happen only with Alpine 2.5.
Bye
Alessandro

(from redmine: issue id 1497, created on 2012-12-05, closed on 2013-02-08)

  • Changesets:
    • Revision 0e83c2ead081c11b763dda91333916a00d49170e by Natanael Copa on 2012-12-28T15:05:18Z:
main/awall: fix warning about -m state

ref #1497
  • Revision 78f82234bda9bfe7be6c088227517848e954f560 by Natanael Copa on 2012-12-28T15:06:11Z:
main/awall: fix warning about -m state

fixes #1497
(cherry picked from commit 0e83c2ead081c11b763dda91333916a00d49170e)
  • Revision 9635c871 by Natanael Copa on 2013-01-01T08:35:51Z:
filter: fix warning about -m state in newer iptables

Fixes this warning when using recent iptables:
WARNING: The state match is obsolete. Use conntrack instead.

ref #1497