Looking through the system logs (journalctl --boot), I stumbled on the following error messages from firewalld; it looks like the function iptables-restore is called fairly frequently, generally after the system wakes up from sleep, and never succeeds. The intervening lines vary.
Is this something to worry about?
Apr 09 07:16:49 amito firewalld[926]: ERROR: '/usr/sbin/iptables- restore -w -n' failed: iptables-restore: line 9 failed Apr 09 07:16:46 amito systemd[1]: Started Hostname Service. Apr 09 07:16:49 amito firewalld[926]: ERROR: '/usr/sbin/ip6tables- restore -w -n' failed: ip6tables-restore: line 9 failed Apr 09 07:16:46 amito NetworkManager[1020]: <info> [1617977806.4768] hostname: hostname: using hostnamed Apr 09 07:16:49 amito firewalld[926]: ERROR: COMMAND_FAILED: '/usr/sbin/ip6tables-restore -w -n' failed: ip6tables-restore: line 9 failed
On 4/11/21 8:20 AM, Jonathan Ryshpan wrote:
Looking through the system logs (journalctl --boot), I stumbled on the following error messages from firewalld; it looks like the function iptables-restore is called fairly frequently, generally after the system wakes up from sleep, and never succeeds. The intervening lines vary.
Is this something to worry about?
I would say yes. (I don't use firewalld and still write my own iptables rules. perhaps firewalld covers this but IDK). When you see an iptables?-restore error it means the rule set was not loaded. If there was no previous rule set in place you are running wide open (unless your default policies are DROP).
Apr 09 07:16:49 amito firewalld[926]: ERROR: '/usr/sbin/iptables- restore -w -n' failed: iptables-restore: line 9 failed Apr 09 07:16:46 amito systemd[1]: Started Hostname Service. Apr 09 07:16:49 amito firewalld[926]: ERROR: '/usr/sbin/ip6tables- restore -w -n' failed: ip6tables-restore: line 9 failed Apr 09 07:16:46 amito NetworkManager[1020]: <info> [1617977806.4768] hostname: hostname: using hostnamed Apr 09 07:16:49 amito firewalld[926]: ERROR: COMMAND_FAILED: '/usr/sbin/ip6tables-restore -w -n' failed: ip6tables-restore: line 9 failed
users mailing list -- users@lists.fedoraproject.org To unsubscribe send an email to users-leave@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
在 2021-04-11星期日的 08:20 -0700,Jonathan Ryshpan写道:
Looking through the system logs (journalctl --boot), I stumbled on the following error messages from firewalld; it looks like the function iptables-restore is called fairly frequently, generally after the system wakes up from sleep, and never succeeds. The intervening lines vary.
Is this something to worry about?
Not really, but this means that some of your firewalld configuration is broken.
When system reconnects to network (e.g. boot, wake up...), firewalld will apply your firewall settings to interface, some of your settings tells firewalld to set iptables rule by iptables-retore and those settings are bad that iptables-retore failed.
I don't know what kinds of overrides you have done, but you may check them in /etc/firewalld
Apr 09 07:16:49 amito firewalld[926]: ERROR: '/usr/sbin/iptables- restore -w -n' failed: iptables-restore: line 9 failed Apr 09 07:16:46 amito systemd[1]: Started Hostname Service. Apr 09 07:16:49 amito firewalld[926]: ERROR: '/usr/sbin/ip6tables- restore -w -n' failed: ip6tables-restore: line 9 failed Apr 09 07:16:46 amito NetworkManager[1020]: <info> [1617977806.4768] hostname: hostname: using hostnamed Apr 09 07:16:49 amito firewalld[926]: ERROR: COMMAND_FAILED: '/usr/sbin/ip6tables-restore -w -n' failed: ip6tables-restore: line 9 failed
users mailing list -- users@lists.fedoraproject.org To unsubscribe send an email to users-leave@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en- US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/users@lists.fedoraproje ct.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure