iptables, flush and restore raw table (#8501)

As part of an iptables restart, flush and reset the netfilter raw table.

SPECS/iptables/iptables

@@ -57,6 +57,8 @@ iptables -F
 iptables -X
 iptables -Z
 
+iptables -t raw -F
+iptables -t raw -X
 iptables -t nat -F
 iptables -t nat -X
 iptables -t mangle -F
@@ -66,6 +68,8 @@ ip6tables -F
 ip6tables -X
 ip6tables -Z
 
+ip6tables -t raw -F
+ip6tables -t raw -X
 ip6tables -t nat -F
 ip6tables -t nat -X
 ip6tables -t mangle -F

SPECS/iptables/iptables.signatures.json

@@ -2,9 +2,9 @@
  "Signatures": {
   "ip4save": "f786a0a55cee6aa5a29d0bfd531d982205dc566bb622250f13f0f90a85ac1e2a",
   "ip6save": "e676691dac74076ad1a9475bd1a9dcc35d40cc99faf56e4767725c94b53a5bdd",
-  "iptables": "31bdf451aa30c50f01d61fc748434759aa003fa2a2edb3a1c10f034e706eb2f4",
+  "iptables": "a1981d0e5a7e6b0546d17fcddb5bdc6b639a136b5c2f7f2b2b54d18a41b3d6ac",
   "iptables-1.8.10.tar.xz": "5cc255c189356e317d070755ce9371eb63a1b783c34498fb8c30264f3cc59c9c",
   "iptables.service": "40c2a272a6abb4d3e50ff9ae83cedaa241ad5963f27cb5aee113d15597553620",
-  "iptables.stop": "82552df9a7edc2f764369d0b944a26abb2cafd9259f65b9da2760c4115a4ff29"
+  "iptables.stop": "749be754470183b3edf69ff53109806a81e0b4c4578858faf96d23d59966ef5d"
  }
 }

SPECS/iptables/iptables.spec

@@ -1,7 +1,7 @@
 Summary:        Linux kernel packet control tool
 Name:           iptables
 Version:        1.8.10
-Release:        1%{?dist}
+Release:        2%{?dist}
 License:        GPLv2+
 Vendor:         Microsoft Corporation
 Distribution:   Azure Linux
@@ -100,6 +100,9 @@ find %{buildroot} -type f -name "*.la" -delete -print
 %{_mandir}/man3/*
 
 %changelog
+* Mon Mar 18 2024 Andy Zaugg <azaugg@linkedin.com> - 1.8.10-2
+- Flush raw table when restarting iptables service
+
 * Fri Feb 09 2024 Amrita Kohli <amritakohli@microsoft.com> - 1.8.10-1
 - Upgrade version for Mariner 3.0 release
 

SPECS/iptables/iptables.stop

@@ -4,6 +4,8 @@
 
 iptables -Z
 iptables -F
+iptables -t raw -F
+iptables -t raw -X
 iptables -t nat -F
 iptables -t nat -X
 iptables -t mangle -F
@@ -15,6 +17,8 @@ iptables -P OUTPUT      ACCEPT
 
 ip6tables -Z
 ip6tables -F
+ip6tables -t raw -F
+ip6tables -t raw -X
 ip6tables -t nat -F
 ip6tables -t nat -X
 ip6tables -t mangle -F