<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<p><b>It happens when I execute this:</b></p>
<p>/usr/share/ufw/check-requirements</p>
<p><b>Output - the fail is in the bold text <br>
</b></p>
<p>root@server:~# /usr/share/ufw/check-requirements<br>
Has python: pass (binary: python2.7, version: 2.7.15+, py2)<br>
Has iptables: pass<br>
Has ip6tables: pass<br>
<br>
Has /proc/net/dev: pass<br>
Has /proc/net/if_inet6: pass<br>
<br>
This script will now attempt to create various rules using the
iptables<br>
and ip6tables commands. This may result in module autoloading (eg,
for<br>
IPv6).<br>
Proceed with checks (Y/n)? y<br>
== IPv4 ==<br>
Creating 'ufw-check-requirements'... done<br>
Inserting RETURN at top of 'ufw-check-requirements'... done<br>
TCP: pass<br>
UDP: pass<br>
destination port: pass<br>
source port: pass<br>
ACCEPT: pass<br>
DROP: pass<br>
REJECT: pass<br>
LOG: pass<br>
hashlimit: pass<br>
limit: pass<br>
ctstate (NEW): pass<br>
ctstate (RELATED): pass<br>
ctstate (ESTABLISHED): pass<br>
ctstate (INVALID): pass<br>
ctstate (new, recent set): pass<br>
ctstate (new, recent update): pass<br>
ctstate (new, limit): pass<br>
interface (input): pass<br>
interface (output): pass<br>
multiport: pass<br>
comment: pass<br>
addrtype (LOCAL): pass<br>
addrtype (MULTICAST): pass<br>
addrtype (BROADCAST): pass<br>
icmp (destination-unreachable): pass<br>
icmp (source-quench): pass<br>
icmp (time-exceeded): pass<br>
icmp (parameter-problem): pass<br>
icmp (echo-request): pass<br>
<br>
== IPv6 ==<br>
Creating 'ufw-check-requirements6'... done<br>
Inserting RETURN at top of 'ufw-check-requirements6'... done<br>
TCP: pass<br>
UDP: pass<br>
destination port: pass<br>
source port: pass<br>
ACCEPT: `pass<br>
DROP: pass<br>
REJECT: pass<br>
LOG: pass<br>
hashlimit: pass<br>
limit: pass<br>
ctstate (NEW): pass<br>
ctstate (RELATED): pass<br>
ctstate (ESTABLISHED): pass<br>
ctstate (INVALID): pass<br>
ctstate (new, recent set): pass<br>
ctstate (new, recent update): pass<br>
ctstate (new, limit): pass<br>
interface (input): pass<br>
interface (output): pass<br>
multiport: pass<br>
comment: pass<br>
<b>icmpv6 (destination-unreachable): FAIL</b><b><br>
</b><b>error was: ip6tables v1.8.2 (nf_tables): unknown option
"--icmpv6-type"</b><b><br>
</b><b>Try `ip6tables -h' or 'ip6tables --help' for more
information.</b><b><br>
</b><b>icmpv6 (packet-too-big): FAIL</b><b><br>
</b><b>error was: ip6tables v1.8.2 (nf_tables): unknown option
"--icmpv6-type"</b><b><br>
</b><b>Try `ip6tables -h' or 'ip6tables --help' for more
information.</b><b><br>
</b><b>icmpv6 (time-exceeded): FAIL</b><b><br>
</b><b>error was: ip6tables v1.8.2 (nf_tables): unknown option
"--icmpv6-type"</b><b><br>
</b><b>Try `ip6tables -h' or 'ip6tables --help' for more
information.</b><b><br>
</b><b>icmpv6 (parameter-problem): FAIL</b><b><br>
</b><b>error was: ip6tables v1.8.2 (nf_tables): unknown option
"--icmpv6-type"</b><b><br>
</b><b>Try `ip6tables -h' or 'ip6tables --help' for more
information.</b><b><br>
</b><b>icmpv6 (echo-request): FAIL</b><b><br>
</b><b>error was: ip6tables v1.8.2 (nf_tables): unknown option
"--icmpv6-type"</b><b><br>
</b><b>Try `ip6tables -h' or 'ip6tables --help' for more
information.</b><b><br>
</b><b>icmpv6 with hl (neighbor-solicitation): FAIL</b><b><br>
</b><b>error was: ip6tables v1.8.2 (nf_tables): unknown option
"--icmpv6-type"</b><b><br>
</b><b>Try `ip6tables -h' or 'ip6tables --help' for more
information.</b><b><br>
</b><b>icmpv6 with hl (neighbor-advertisement): FAIL</b><b><br>
</b><b>error was: ip6tables v1.8.2 (nf_tables): unknown option
"--icmpv6-type"</b><b><br>
</b><b>Try `ip6tables -h' or 'ip6tables --help' for more
information.</b><b><br>
</b><b>icmpv6 with hl (router-solicitation): FAIL</b><b><br>
</b><b>error was: ip6tables v1.8.2 (nf_tables): unknown option
"--icmpv6-type"</b><b><br>
</b><b>Try `ip6tables -h' or 'ip6tables --help' for more
information.</b><b><br>
</b><b>icmpv6 with hl (router-advertisement): FAIL</b><b><br>
</b><b>error was: ip6tables v1.8.2 (nf_tables): unknown option
"--icmpv6-type"</b><b><br>
</b><b>Try `ip6tables -h' or 'ip6tables --help' for more
information.</b><b><br>
</b><b>ipv6 rt: pass</b><b><br>
</b><b><br>
</b><b>FAIL: check your kernel and that you have iptables >=
1.4.0</b><br>
<br>
</p>
<p><br>
</p>
<p><br>
</p>
<p>On Wed, 05 Dec 2018 13:27:06 +0100 Patrik Laszlo <alabard@gmail.com>
wrote:</alabard@gmail.com></p>
<p><br>
<alabard@gmail.com></alabard@gmail.com></p>
<alabard@gmail.com>> Package: iptables<br>
> Version: 1.8.2-2<br>
> Severity: normal<br>
> <br>
> Dear Maintainer,<br>
> <br>
> *** Reporter, please consider answering these questions,
where appropriate ***<br>
> <br>
> * What led up to the situation?<br>
> I cannot use UFW, because as the subject says unknown option
"--icmpv6-type".<br>
> <br>
> * What exactly did you do (or not do) that was effective (or<br>
> ineffective)?<br>
> After I updated everything to up to date in Debian
Testing/Buster, I cannot use the UFW anymore.<br>
> ufw disable && ufw enable give that error<br>
> <br>
> * What was the outcome of this action?<br>
> UFW is not working now<br>
> <br>
> * What outcome did you expect instead?<br>
> It has been using the last 3 years with no problem with UFW<br>
> <br>
> <br>
> *** End of the template - remove these template lines ***<br>
> <br>
> <br>
> -- System Information:<br>
> Debian Release: buster/sid<br>
> APT prefers testing<br>
> APT policy: (500, 'testing')<br>
> Architecture: amd64 (x86_64)<br>
> <br>
> Kernel: Linux 4.15.0-2-amd64 (SMP w/8 CPU cores)<br>
> Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8
(charmap=UTF-8), LANGUAGE=en_US:en (charmap=UTF-8)<br>
> Shell: /bin/sh linked to /bin/dash<br>
> Init: systemd (via /run/systemd/system)<br>
> LSM: AppArmor: enabled<br>
> <br>
> Versions of packages iptables depends on:<br>
> ii libc6 2.27-8<br>
> ii libip4tc0 1.8.2-2<br>
> ii libip6tc0 1.8.2-2<br>
> ii libiptc0 1.8.2-2<br>
> ii libmnl0 1.0.4-2<br>
> ii libnetfilter-conntrack3 1.0.7-1<br>
> ii libnfnetlink0 1.0.1-3+b1<br>
> ii libnftnl7 1.1.1-1<br>
> ii libxtables12 1.8.2-2<br>
> <br>
> iptables recommends no packages.<br>
> <br>
> Versions of packages iptables suggests:<br>
> ii kmod 25-2<br>
> <br>
> -- no debconf information<br>
> <br>
> <br>
</alabard@gmail.com><br>
</body>
</html>