iptables引发cneots服务器无法启动,iptablescneots

iptables引发cneots服务器无法启动,iptablescneots

stats-storage-0:/root#iptables--flush

stats-storage-0:/etc/sysconfig/network-scripts#serviceiptablesstart

Flushingfirewallrules:[OK]

SettingchainstopolicyACCEPT:filter[OK]

Unloadingiptablesmodules:

...andthereithangs.WhenIthenrun,inanotherwindow:

stats-storage-0:/root#serviceopenibdstop

UnloadingOpenIBkernelmodules:[OK]

...thentheiptablesrunfrombeforecompletessuccessfully.

Isthisaknown/reportedbug?Oristhissomethingnew?

Note:Ihavemodified/etc/sysconfig/iptables-config,tocommentout

thisline:

#IPTABLES_MODULES="ip_conntrack_netbios_ns"

IPTABLES_MODULES=""

Ididthisinanattempttostoptheactualkernelpanics,which

areofcourseworse.Thelogsfromoneofthosekernelpanics:

iRemovingnetfilterNETLINKlayer.

ip_tables:(C)2000-2006NetfilterCoreTeam

NetfiltermessagesviaNETLINKv0.30.

ip_conntrackversion2.4(8192buckets,65536max)-304bytesper

conntrack

Unabletohandlekernelpagingrequestat0000000000200200RIP:

[<ffffffff80157b5d>]list_del+0x8/0x71

PGD6b0eb067PUD6f36c067PMD0

Oops:0000[1]SMP

lastsysfsfile:

/devices/pci0000:00/0000:00:02.0/0000:04:00.0/0000:05:00.0/0000:06:00.0/0000:07:

00.0/irq

CPU7

Moduleslinkedin:ip_conntracknfnetlinknfsfscachehfsplusnfsd

exportfsnfs_aclauth_rpcgssopenafs(PU)autofs4ipmi_devintfipmi_si

ipmi_msghandlerlockdsunrpcipt_REJECTip6t_REJECTxt_tcpudp

ip6table_filterip6_tablesx_tablesbe2iscsiiscsi_tcpbnx2icnicuio

cxgb3icxgb38021qlibiscsi_tcpib_iserlibiscsi2scsi_transport_iscsi2

scsi_transport_iscsiib_srprdsib_sdpib_ipoibipoib_helperipv6

xfrm_nalgocrypto_apirdma_ucmrdma_cmib_ucmib_uverbsib_umadib_cm

iw_cmib_addrib_samlx4_ibib_madib_coreloopdm_mirrordm_multipath

scsi_dhvideobacklightsbspower_meterhwmoni2c_eci2c_coredell_wmiwmi

buttonbatteryasus_acpiacpi_memhotplugacparport_pclpparportmlx4_en

joydevsr_modcdromsgqla2xxxtpm_tistpmmlx4_coretpm_biosbnx2

scsi_transport_fcpcspkri5000_edacedac_mcserio_rawdm_raid45dm_message

dm_region_hashdm_logdm_moddm_mem_cacheata_piixlibatashpchp

megaraid_sassd_modscsi_modext3jbduhci_hcdohci_hcdehci_hcd

Pid:11693,comm:modprobeTainted:P2.6.18-238.1.1.el5#1

RIP:0010:[<ffffffff80157b5d>][<ffffffff80157b5d>]list_del+0x8/0x71

RSP:0000:ffff81006fd83ea8EFLAGS:00010213

RAX:0000000000200200RBX:ffff81006cdce9a8RCX:ffff810037c2c3b8

RDX:ffff81006cdce8b8RSI:0000000000000000RDI:ffff81006cdce9a8

RAX:0000000000200200RBX:ffff81006cdce9a8RCX:ffff810037c2c3b8

RDX:ffff81006cdce8b8RSI:0000000000000000RDI:ffff81006cdce9a8

RBP:000000000001fff0R08:ffff81007f06bbf8R09:ffffffff8886f9f3

R10:ffffffff804b1300R11:0000000000000000R12:0000000000002000

R13:0000000000000000R14:ffffffff8886f9f3R15:0000000000000000

FS:00002b0c65d266e0(0000)GS:ffff81007fae03c0(0000)

knlGS:0000000000000000

CS:0010DS:0000ES:0000CR0:000000008005003b

CR2:0000000000200200CR3:000000006af74000CR4:00000000000006e0

Processmodprobe(pid:11693,threadinfoffff81006fd82000,task

ffff81007a652080)

Stack:ffff81006cdce8b8ffffffff8887125dffff81006cdce8b8

ffffffff8887017f

00000000000000ff0000000000000000000000000000088000000000113ac568

00007fff52d23520ffffffff88870309ffffffff8887ca00ffffffff800a8559

CallTrace:

[<ffffffff8887125d>]:ip_conntrack:destroy_conntrack+0x9a/0xdc

[<ffffffff8887017f>]:ip_conntrack:ip_ct_iterate_cleanup+0x30/0x142

[<ffffffff88870309>]:ip_conntrack:ip_conntrack_cleanup+0x6a/0xc7

[<ffffffff800a8559>]sys_delete_module+0x196/0x1c5

[<ffffffff8005d28d>]tracesys+0xd5/0xe0

Code:488b104839fa741b4889fe31c048c7c7903b2c80

RIP[<ffffffff80157b5d>]list_del+0x8/0x71

RSP<ffff81006fd83ea8>

CR2:0000000000200200

<0>Kernelpanic-notsyncing:Fatalexception

sed-i"s/IPTABLES_MODULES_UNLOAD="yes"/IPTABLES_MODULES_UNLOAD="yes""/etc/sysconfig/iptables-config

将IPTABLES_MODULES_UNLOAD="yes"改为no

功能：当iptables重启或停止时，是否卸载所载入的模块，yes表示是