View Issue Details

IDProjectCategoryView StatusLast Update
0017533CentOS-8kernelpublic2020-06-23 16:52
Reporterbern Assigned To 
Status newResolutionopen 
Product Version8.2.2004 
Summary0017533: Support for iptables -m time Missing in Kernel
DescriptionWe administer firewall settings with ferm, so at least those have firewalld deactivated so as to use plain iptables instead.

On CentOS 8, the "time" module is still mentioned in the iptables-extended manpage and apparently supported by the libs, but there's no matching kernel module and attempts to use it yield an error message:

# ls -l /usr/lib64/xtables/*_{comment,time}.*
-rwxr-xr-x. 1 root root 12288 Apr 24 15:51 /usr/lib64/xtables/
-rwxr-xr-x. 1 root root 16496 Apr 24 15:51 /usr/lib64/xtables/

# ls -l /lib/modules/*/kernel/net/netfilter/*_{comment,time}.*
ls: cannot access '/lib/modules/*/kernel/net/netfilter/*_time.*': No such file or directory
-rw-r--r--. 1 root root 1784 Dec 4 2019 /lib/modules/4.18.0-147.el8.x86_64/kernel/net/netfilter/xt_comment.ko.xz
-rw-r--r--. 1 root root 1788 Jun 10 13:23 /lib/modules/4.18.0-193.6.3.el8_2.x86_64/kernel/net/netfilter/xt_comment.ko.xz

# iptables -A OUTPUT -d -m time --datestop 2020-07-01 -j ACCEPT
iptables v1.8.4 (nf_tables): Couldn't load match `time':No such file or directory

Try `iptables -h' or 'iptables --help' for more information.
# iptables -A OUTPUT -d -m comment --comment "Testing" -j ACCEPT
# iptables -n -v -L OUTPUT
Chain OUTPUT (policy ACCEPT 832 packets, 156K bytes)
 pkts bytes target prot opt in out source destination
    0 0 ACCEPT all -- * * /* Testing */
Steps To Reproduce1. Install and boot CentOS 8
2. See command and error message above

(Expected: Either provide required kernel module, or remove mention of -m time from manpages)
TagsNo tags attached.


There are no notes attached to this issue.

Issue History

Date Modified Username Field Change
2020-06-23 16:52 bern New Issue