webadmin-list

[webmin-l] iptables not restore upon reboot on Ubuntu 20.04.LTS

[Joaquim H. <jo...@we...>]

Not sure if this has been posted here before, but we have a couple of 
Ubuntu 20.04.LTS servers where Webmin will *not* restore IPTABLES upon 
re-boot.

If I go into Webmin > Networking > Linux Firewall, it says it should 
activate on boot time, but it won't.

I can, naturally, do an iptables-restore < 
/etc/webmin/firewall/iptables.save, but it's not quite as "sexy" ;-)


What am I doing wrong?


-joho

Re: [webmin-l] iptables not restore upon reboot on Ubuntu 20.04.LTS

[Gábor G. <meg...@gm...>]

anything?

try to save your rules to iptables.up.rules maybe?

Joaquim Homrighausen <jo...@we...> ezt írta (időpont: 2021. nov.
22., H, 23:33):

>
> Not sure if this has been posted here before, but we have a couple of
> Ubuntu 20.04.LTS servers where Webmin will *not* restore IPTABLES upon
> re-boot.
>
> If I go into Webmin > Networking > Linux Firewall, it says it should
> activate on boot time, but it won't.
>
> I can, naturally, do an iptables-restore <
> /etc/webmin/firewall/iptables.save, but it's not quite as "sexy" ;-)
>
>
> What am I doing wrong?
>
>
> -joho
>
>
>
>
> -
> Forwarded by the Webmin mailing list at
> web...@li...
> To remove yourself from this list, go to
> http://lists.sourceforge.net/lists/listinfo/webadmin-list
>

Re: [webmin-l] iptables not restore upon reboot on Ubuntu 20.04.LTS

[Jamie C. <jca...@we...>]

On 22/Nov/2021 14:12 Joaquim Homrighausen <jo...@we...> wrote ..
> 
> Not sure if this has been posted here before, but we have a couple of 
> Ubuntu 20.04.LTS servers where Webmin will *not* restore IPTABLES upon 
> re-boot.
> 
> If I go into Webmin > Networking > Linux Firewall, it says it should 
> activate on boot time, but it won't.
> 
> I can, naturally, do an iptables-restore < 
> /etc/webmin/firewall/iptables.save, but it's not quite as "sexy" ;-)
> 
> What am I doing wrong?

If you go to System -> Bootup and Shutdown, is there a boot action named
"iptables" or similar?

Re: [webmin-l] iptables not restore upon reboot on Ubuntu 20.04.LTS

[Joaquim H. <jo...@we...>]

On 2021-11-23 06:16, Jamie Cameron wrote:

> If you go to System -> Bootup and Shutdown, is there a boot action named
> "iptables" or similar?

There is not. But there is "webmin-ip6tables.service" and 
"webmin-iptables.service".

(and then there are network-pre.target, network.target, and 
networkd-dispatcher.service)

This is a "plain vanilla" Ubuntu 20.04, upgraded from Ubuntu 18.04. But 
I see this also on freshly deployed Ubuntu 20.04 systems.



-joho

Re: [webmin-l] iptables not restore upon reboot on Ubuntu 20.04.LTS

[Jamie C. <jca...@we...>]

On 23/Nov/2021 01:33 Joaquim Homrighausen <jo...@we...> wrote ..
> On 2021-11-23 06:16, Jamie Cameron wrote:
> 
> > If you go to System -> Bootup and Shutdown, is there a boot action named
> > "iptables" or similar?
> 
> There is not. But there is "webmin-ip6tables.service" and 
> "webmin-iptables.service".
> 
> (and then there are network-pre.target, network.target, and 
> networkd-dispatcher.service)
> 
> This is a "plain vanilla" Ubuntu 20.04, upgraded from Ubuntu 18.04. But 
> I see this also on freshly deployed Ubuntu 20.04 systems.

Ok, it looks like on Ubuntu 20, a separate package called "iptables-persistent"
has to be installed to get that bootup action.

 - Jamie

Re: [webmin-l] iptables not restore upon reboot on Ubuntu 20.04.LTS

[Joaquim H. <jo...@we...>]

On 2021-11-25 07:50, Jamie Cameron wrote:
>
> Ok, it looks like on Ubuntu 20, a separate package called "iptables-persistent"
> has to be installed to get that bootup action.


Thanks. I'll try that.

Will Webmin support the /etc/iptables/rules.v4 and 
/etc/iptables/rules.v6 files? That's what the package creates and uses.


-joho

Re: [webmin-l] iptables not restore upon reboot on Ubuntu 20.04.LTS

[Gábor G. <meg...@gm...>]

Thats why you need to save into those files your rules.

iptables-save > /etc/iptables/rules.v4

ip6tables-save > /etc/iptables/rules.v6

But maybe need to refresh your knowledge and read about nftables
<https://wiki.nftables.org/wiki-nftables/index.php/Moving_from_iptables_to_nftables>.

Iptables is replaced by nftables, but you can use it his commands





Joaquim Homrighausen <jo...@we...> ezt írta (időpont: 2021. nov.
25., Cs, 9:10):

> On 2021-11-25 07:50, Jamie Cameron wrote:
> >
> > Ok, it looks like on Ubuntu 20, a separate package called
> "iptables-persistent"
> > has to be installed to get that bootup action.
>
>
> Thanks. I'll try that.
>
> Will Webmin support the /etc/iptables/rules.v4 and
> /etc/iptables/rules.v6 files? That's what the package creates and uses.
>
>
> -joho
>
>
>
>
> -
> Forwarded by the Webmin mailing list at
> web...@li...
> To remove yourself from this list, go to
> http://lists.sourceforge.net/lists/listinfo/webadmin-list
>