[BUG] WARNING: Failed to get firewall packets in new iptables version #3280
Open
Description
Describe the bug: A clear and concise description of what the bug is.
After provisioning VM on Azure, see WARNING log in waagent.log:
WARNING ExtHandler ExtHandler Failed to get firewall packets: 'iptables -w -t security -L OUTPUT --zero OUTPUT -nxv' failed: 2 (iptables v1.8.11 (nf_tables): Illegal option `--numeric' with this command
Try `iptables -h' or 'iptables --help' for more information.)
If removing '-n' and '-x', only run "iptables -w -t security -L OUTPUT --zero OUTPUT -v", this command works well:
# iptables -w -t security -L OUTPUT --zero OUTPUT -v
Chain OUTPUT (policy ACCEPT 3040 packets, 422K bytes)
pkts bytes target prot opt in out source destination
0 0 ACCEPT tcp -- any any anywhere 168.63.129.16 tcp dpt:domain
17000 4324K ACCEPT tcp -- any any anywhere 168.63.129.16 owner UID match root
0 0 DROP tcp -- any any anywhere 168.63.129.16 ctstate INVALID,NEW
Zeroing chain `OUTPUT'
No such issue in RHEL-9.
Distro and WALinuxAgent details (please complete the following information):
RHEL-10
WALinuxAgent-2.9.1.1
Python: 3.12.8
Goal state agent: 2.9.1.1
iptables-nft-1.8.11-6
Metadata
Assignees
Labels
No labels