Disabling modules within conntrack causes VyOS to fail to load the configuration:
modules {
gre {
disable
}
nfs {
disable
}
pptp {
disable
}
sqlnet {
disable
}
tftp {
disable
}
}Errors like the following are the result:
rmmod: ERROR: Module nf_nat_proto_gre is not currently loaded rmmod: ERROR: Module nf_conntrack_proto_gre is not currently loaded [[system conntrack]] failed Commit failed
Hi Chris,
I couldn't reproduce it in rc3, as stated. Please retest, and if you still get the error, we'll need to figure out the reproducing steps.
From my testing, simply disabling modules on a system that has no NAT or firewall configured and rebooting appears to work as expected.
It seems that in RC3 no conntrack settings work at all, causing the configuration loading to fail. For instance,
system conntrack tcp loose enable
causes:
sysctl: cannot stat /proc/sys/net/ipv4 netfilter/ip_conntrack_tcp_loose: No such file or directory
This is actually fixed in T888 (https://github.com/vyos/vyatta-conntrack/commit/d531770031cc9e9bf27c889bf239f265ac2c28ae) but it seems it didn't make it into rc3.
Interestingly, disabling particular modules works fine in 1.1.8 regardless of whether NAT or firewall policies were in place.
I've tested this configuration again and it works for me, so I suppose it's fixed. If it reapprears, feel free to reopen.