Security Group ICMP Rule

I’ve created a security group and added a ICMP rule. Opennebula tries to deploy it with the multiport attribute which doesn’t work. This seems not to be correct :wink:

sudo iptables -A one-10-0-i -p icmp -m multiport --dports -j RETURN
iptables v1.6.0: multiport only works with TCP, UDP, UDPLITE, SCTP and DCCP
Try `iptables -h' or 'iptables --help' for more information.

Mon Aug 13 21:59:32 2018 [Z0][VMM][I]: VM security group updated.
Mon Aug 13 22:00:53 2018 [Z0][VMM][I]: Command execution fail: /var/tmp/one/vnm/fw/update_sg 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 'one-14'
Mon Aug 13 22:00:53 2018 [Z0][VMM][I]: iptables v1.6.0: multiport only works with TCP, UDP, UDPLITE, SCTP and DCCP
Mon Aug 13 22:00:53 2018 [Z0][VMM][I]: Try `iptables -h' or 'iptables --help' for more information.
Mon Aug 13 22:00:53 2018 [Z0][VMM][E]: update_sg: Command Error: sudo iptables -A one-14-0-i -p icmp -m multiport --dports  -j RETURN
Mon Aug 13 22:00:53 2018 [Z0][VMM][E]: update_sg: ["/var/tmp/one/vnm/command.rb:62:in `block in run!'", "/var/tmp/one/vnm/command.rb:59:in `each'", "/var/tmp/one/vnm/command.rb:59:in `run!'", "/var/tmp/one/vnm/security_groups.rb:277:in `run!'", "/var/tmp/one/vnm/sg_driver.rb:104:in `block (2 levels) in activate'", "/var/tmp/one/vnm/sg_driver.rb:96:in `each'", "/var/tmp/one/vnm/sg_driver.rb:96:in `block in activate'", "/var/tmp/one/vnm/vnm_driver.rb:79:in `block in process'", "/var/tmp/one/vnm/vm.rb:61:in `block in each_nic'", "/var/tmp/one/vnm/vm.rb:60:in `each'", "/var/tmp/one/vnm/vm.rb:60:in `each_nic'", "/var/tmp/one/vnm/vnm_driver.rb:82:in `process'", "/var/tmp/one/vnm/sg_driver.rb:84:in `activate'", "/var/tmp/one/vnm/fw/update_sg:32:in `<main>'"]
Mon Aug 13 22:00:53 2018 [Z0][VMM][I]: ExitCode: 1
Mon Aug 13 22:00:53 2018 [Z0][VMM][I]: Failed to execute network driver operation: update_sg.
Mon Aug 13 22:00:53 2018 [Z0][VMM][E]: Error updating security groups.: fw: -