[CentOS] RESOLVED: Re: [Shorewall-users] RedHat 6.4 - ERROR: Your kernel/iptables do not include state match support. No version of Shorewall will run on this system

Il 25/02/2013 12.28, Simon Matter ha scritto:
>> Hello to the list,
>> I update a RedHat server from 6.3 to 6.4 and install the last shorewall
>> rpm  4.5.13.0-1.el6, after this shorewall not start at boot and show the
>> error ERROR: Your kernel/iptables do not include state match support. No
>> version of Shorewall will run on this system, after the boot I can start
>> shorewall by hand.
>
> Could it be a problem with SELinux?
>
> Simon
>
>> What can I do?
>> Thanks to everybody
>>
>> Amedeo

Here from the shorewall newsletter...............

Simon you're magician!!!!!
the update change the selinux's labels of iptables after reset this it's all ok....
I think that when the people updates frome centos 6.3 to centos 6.4 the world stopping
Here is the commands:

restorecon -Rv /sbin
restorecon reset /sbin/iptables-multi-1.4.7 context system_u:object_r:bin_t:s0->system_u:object_r:iptables_exec_t:s0
restorecon reset /sbin/ip6tables-multi-1.4.7 context system_u:object_r:bin_t:s0->system_u:object_r:iptables_exec_t:s0

Thanks sooo much
Amedeo