stats-storage-0:/root# iptables --flush
stats-storage-0:/etc/sysconfig/network-scripts# service iptables start
Flushing firewall rules:                                   [  OK  ]
Setting chains to policy ACCEPT: filter                    [  OK  ]
Unloading iptables modules:

        ...and there it hangs.  When I then run, in another window:

stats-storage-0:/root# service openibd stop
Unloading OpenIB kernel modules:                           [  OK  ]

        ...then the iptables run from before completes successfully.

        Is this a known/reported bug?  Or is this something new?

        Note: I have modified /etc/sysconfig/iptables-config, to comment out
this line:

#IPTABLES_MODULES="ip_conntrack_netbios_ns"
IPTABLES_MODULES=""

        I did this in an attempt to stop the actual kernel panics, which
are of course worse.  The logs from one of those kernel panics:

iRemoving netfilter NETLINK layer.                                             
ip_tables: (C) 2000-2006 Netfilter Core Team                                   
Netfilter messages via NETLINK v0.30.                                          
ip_conntrack version 2.4 (8192 buckets, 65536 max) - 304 bytes per             
conntrack                                                                      
Unable to handle kernel paging request at 0000000000200200 RIP:                
[<ffffffff80157b5d>] list_del+0x8/0x71                                        
PGD 6b0eb067 PUD 6f36c067 PMD 0                                                
Oops: 0000 [1] SMP                                                             
last sysfs file:                                                               
/devices/pci0000:00/0000:00:02.0/0000:04:00.0/0000:05:00.0/0000:06:00.0/0000:07:
00.0/irq                                                                       
CPU 7                                                                          
Modules linked in: ip_conntrack nfnetlink nfs fscache hfsplus nfsd             
exportfs nfs_acl auth_rpcgss openafs(PU) autofs4 ipmi_devintf ipmi_si          
ipmi_msghandler lockd sunrpc ipt_REJECT ip6t_REJECT xt_tcpudp                  
ip6table_filter ip6_tables x_tables be2iscsi iscsi_tcp bnx2i cnic uio          
cxgb3i cxgb3 8021q libiscsi_tcp ib_iser libiscsi2 scsi_transport_iscsi2        
scsi_transport_iscsi ib_srp rds ib_sdp ib_ipoib ipoib_helper ipv6              
xfrm_nalgo crypto_api rdma_ucm rdma_cm ib_ucm ib_uverbs ib_umad ib_cm          
iw_cm ib_addr ib_sa mlx4_ib ib_mad ib_core loop dm_mirror dm_multipath         
scsi_dh video backlight sbs power_meter hwmon i2c_ec i2c_core dell_wmi wmi     
button battery asus_acpi acpi_memhotplug ac parport_pc lp parport mlx4_en      
joydev sr_mod cdrom sg qla2xxx tpm_tis tpm mlx4_core tpm_bios bnx2             
scsi_transport_fc pcspkr i5000_edac edac_mc serio_raw dm_raid45 dm_message     
dm_region_hash dm_log dm_mod dm_mem_cache ata_piix libata shpchp               
megaraid_sas sd_mod scsi_mod ext3 jbd uhci_hcd ohci_hcd ehci_hcd               
Pid: 11693, comm: modprobe Tainted: P      2.6.18-238.1.1.el5 #1               
RIP: 0010:[<ffffffff80157b5d>]  [<ffffffff80157b5d>] list_del+0x8/0x71         
RSP: 0000:ffff81006fd83ea8  EFLAGS: 00010213                                   
RAX: 0000000000200200 RBX: ffff81006cdce9a8 RCX: ffff810037c2c3b8              
RDX: ffff81006cdce8b8 RSI: 0000000000000000 RDI: ffff81006cdce9a8              
RAX: 0000000000200200 RBX: ffff81006cdce9a8 RCX: ffff810037c2c3b8              
RDX: ffff81006cdce8b8 RSI: 0000000000000000 RDI: ffff81006cdce9a8              
RBP: 000000000001fff0 R08: ffff81007f06bbf8 R09: ffffffff8886f9f3              
R10: ffffffff804b1300 R11: 0000000000000000 R12: 0000000000002000              
R13: 0000000000000000 R14: ffffffff8886f9f3 R15: 0000000000000000              
FS:  00002b0c65d266e0(0000) GS:ffff81007fae03c0(0000)                          
knlGS:0000000000000000                                                         
CS:  0010 DS: 0000 ES: 0000 CR0: 000000008005003b                              
                                                                               
CR2: 0000000000200200 CR3: 000000006af74000 CR4: 00000000000006e0              
Process modprobe (pid: 11693, threadinfo ffff81006fd82000, task                
ffff81007a652080)                                                              
Stack:  ffff81006cdce8b8 ffffffff8887125d ffff81006cdce8b8                     
ffffffff8887017f                                                               
00000000000000ff 0000000000000000 0000000000000880 00000000113ac568           
00007fff52d23520 ffffffff88870309 ffffffff8887ca00 ffffffff800a8559           
Call Trace:                                                                    
[<ffffffff8887125d>] :ip_conntrack:destroy_conntrack+0x9a/0xdc                
[<ffffffff8887017f>] :ip_conntrack:ip_ct_iterate_cleanup+0x30/0x142           
[<ffffffff88870309>] :ip_conntrack:ip_conntrack_cleanup+0x6a/0xc7             
[<ffffffff800a8559>] sys_delete_module+0x196/0x1c5                            
[<ffffffff8005d28d>] tracesys+0xd5/0xe0                                       
                                                                               
                                                                               
Code: 48 8b 10 48 39 fa 74 1b 48 89 fe 31 c0 48 c7 c7 90 3b 2c 80              
RIP  [<ffffffff80157b5d>] list_del+0x8/0x71                                    
RSP <ffff81006fd83ea8>                                                        
CR2: 0000000000200200                                                          
<0>Kernel panic - not syncing: Fatal exception                                
 

sed -i "s/IPTABLES_MODULES_UNLOAD=\"yes\"  /IPTABLES_MODULES_UNLOAD=\"yes\" "    /etc/sysconfig/iptables-config
 

将IPTABLES_MODULES_UNLOAD="yes"改为no

功能：当iptables重启或停止时，是否卸载所载入的模块，yes表示是