Nicolas Bock <nicolasbock@xxxxxxxxx> wrote: > On Wed, May 29 2019, Florian Westphal wrote: > > No, if its broken thats a regression, I am not aware of any change that > > would cause this. > > > > iptables-restore works for me on 5.1.3 kernel. > > Thanks for the data point. Could you suggest any steps I can take to further > debug the issue? My approach so far has been to take the kernel config from > a working 5.0.x kernel and compile kernel 5.1.x with it. I do the same. > I presume based on your statement that this approach is expected to work. Is > that correct? Or do I need to change some configurations going to 5.1.x? Yes, should work. You could paste your kernel config somewhere. Assuming that module autoloading works for other things, just not for iptables, then check you have # CONFIG_BPFILTER is not set IIRC setting this caused problems in the past.