[netcf-devel] ncftool fails due to bridge-nf-call-iptables turning on when bridge module loads

Dale Bewley dale at fedoraproject.org
Fri Sep 17 00:00:54 UTC 2010


Regarding:

http://fedorahosted.org/pipermail/netcf-devel/2009-December/000397.html
https://bugzilla.redhat.com/show_bug.cgi?id=536895
        
which discusses ncftool failing when bridge-nf-call-iptables is turned
on, and how "off" would be a better default state for the bridge module.
        
This is still a problem on F13.
        
[root at tofu ~]# rpm -q netcf
netcf-0.1.6-1.fc13.x86_64

[root at tofu ~]# grep bridge-nf-call-iptables /etc/sysctl.conf 
net.bridge.bridge-nf-call-iptables = 0
        
[root at tofu ~]# cat /proc/sys/net/bridge/bridge-nf-call-iptables
1
        
[root at tofu ~]# ncftool list
Failed to initialize netcf
error: unspecified error
        
[root at tofu ~]# echo 0 > /proc/sys/net/bridge/bridge-nf-call-iptables
[root at tofu ~]# ncftool list
eth0
lo
        
I suppose this is outside the realm of netcf, but perhaps ncftool could
fail with a more helpful error? Not sure if that could also percolate
through netcf-libs to libvirt and virsh.
        
I have not tested in F14. Has any more thought been given to how to turn
this off by default at the distro level?



More information about the netcf-devel mailing list