[Firehol-support] Does --disable-ipv6 fully work in 3.0.1?

[Phil Whineray]

Hi

On Tue, Apr 12, 2016 at 09:17:26AM -0400, Whit Blauvelt wrote:
> A question with 3.0.1. Just built it on an Ubuntu 12.04 system, which went
> okay after disabling vnetbuild. But:
> 
> # firehol start
> FireHOL: Saving active firewall to a temporary file... /sbin/ip6tables-save: symbol lookup error: /sbin/ip6tables-save: undefined symbol: ipv6_prefix_length
>  FAILED 
> 2016 Apr 12 09:08:29 ... FAILED to activate the firewall from /etc/firehol/firehol.conf. Last good firewall restoration: NO.
> 
> So I rebuilt after "make clean" and also adding "--disable-ipv6". But the
> error persists.
> 
> Should FireHOL be trying to use ip6tables-save when I don't in any context
> use ipv6 and firehol has been built without support for it?

No it shouldn't. Could you check /etc/firehol/firehol-defaults.conf
and if that's not the problem, try to track down how $ENABLE_IPV6 wound
up as "1" with bash -x, since a test wraps the command in question.

Cheers
Phil