iptables-save not showing default chains

[Vishal Kharade]

When i run iptables-save command on rhel or centos its showing below output which i am not able to see on ubuntu machine
[root@rhel-8-50805-client ~]# iptables-save
# Generated by iptables-save v1.8.4 on Sun May 12 05:21:20 2024
*filter
:INPUT ACCEPT [299:79977]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [253:33027]
COMMIT
# Completed on Sun May 12 05:21:20 2024
# Generated by iptables-save v1.8.4 on Sun May 12 05:21:20 2024
*security
:INPUT ACCEPT [299:79977]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [253:33027]
COMMIT
# Completed on Sun May 12 05:21:20 2024
# Generated by iptables-save v1.8.4 on Sun May 12 05:21:20 2024
*raw
:PREROUTING ACCEPT [300:80465]
:OUTPUT ACCEPT [253:33027]
COMMIT
# Completed on Sun May 12 05:21:20 2024
# Generated by iptables-save v1.8.4 on Sun May 12 05:21:20 2024
*mangle
:PREROUTING ACCEPT [300:80465]
:INPUT ACCEPT [299:79977]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [253:33027]
:POSTROUTING ACCEPT [253:33027]
COMMIT
# Completed on Sun May 12 05:21:20 2024
# Generated by iptables-save v1.8.4 on Sun May 12 05:21:20 2024
*nat
:PREROUTING ACCEPT [2:552]
:INPUT ACCEPT [1:64]
:POSTROUTING ACCEPT [52:5283]
:OUTPUT ACCEPT [52:5283]
COMMIT
# Completed on Sun May 12 05:21:20 2024

ProblemType: Bug
DistroRelease: Ubuntu 24.04
Package: iptables 1.8.10-3ubuntu2
ProcVersionSignature: Ubuntu 6.8.0-31.31-generic 6.8.1
Uname: Linux 6.8.0-31-generic x86_64
ApportVersion: 2.28.1-0ubuntu2
Architecture: amd64
CasperMD5CheckResult: unknown
CloudArchitecture: x86_64
CloudID: nocloud
CloudName: unknown
CloudPlatform: nocloud
CloudSubPlatform: seed-dir (cmdline)
Date: Sun May 12 05:04:54 2024
InstallationDate: Installed on 2024-04-26 (16 days ago)
InstallationMedia: Ubuntu-Server 24.04 LTS "Noble Numbat" - Release amd64 (20240423)
SourcePackage: iptables
UpgradeStatus: No upgrade log present (probably fresh install)

[Oibaf (oibaf)]

It looks like only the tables which has some rules get printed. However, you can force the empty tables adding -t tablename, for example:

$ sudo iptables-save -t filter

The counter all looks 0:0, however.

[Vishal Kharade (vishalkharade)]

iptables-save -t option is for specific table by default iptables-save should print all the table which is not showing in any ubuntu even on LTS.

[Oibaf (oibaf)]

I compiled iptables from source and it's still the same.

I'd suggest to report it here:
https://bugzilla.netfilter.org/enter_bug.cgi?product=iptables