Comments (5)
/gh290.at:15: grep "ERROR:.*mismatched tag" ./firewalld.log
stderr:
stdout:
2024-01-06 13:58:25 ERROR: Failed to load direct rules file './/direct.xml': INVALID_TYPE: Not a valid file: mismatched tag: line 5, column 2
2024-01-06 13:58:23 ERROR: '/usr/sbin/ebtables-restore --noflush' failed: ebtables-restore: nft-cache.c:69: nft_cache_level_set: Assertion `!strcmp(req->table, cmd->table)' failed.
2024-01-06 13:58:23 ERROR: COMMAND_FAILED: '/usr/sbin/ebtables-restore --noflush' failed: ebtables-restore: nft-cache.c:69: nft_cache_level_set: Assertion `!strcmp(req->table, cmd->table)' failed.
/gh290.at:16: hard failure
244. gh290.at:1: 244. invalid syntax in xml files (gh290.at:1): FAILED (gh290.at:16)
Looks like an iptables issue?
from firewalld.
iptables kernel or user space ?
from firewalld.
I vaguely recall hitting this or similar issue. Possibly fixed by ebtables (iptables-nft) commit c1083acea707 ("ebtables: Fix corner-case noflush restore bug")
.
from firewalld.
Thanks for the reference, will check
from firewalld.
Nod, I can confirm that pulling in c1083acea707 fixes the firewalld failure.
Will forward the issue to the iptables maintainer in Debian.
Thanks!
from firewalld.
Related Issues (20)
- Applet icon missing in the tray but randomly appears after relog HOT 3
- Add SCTP for DLM
- --runtime-to-permanent removing public zone from active zones HOT 2
- Should `https.xml` include `http3.xml`? HOT 1
- Bug in `wrong_args_for_callable()` causes firewall-applet to crash (regression introduced in 2.1.0) HOT 1
- rework D-Bus bindings and move away from deprecated python-dbus
- Disruptive remnants of firewalld.service remain after removal HOT 3
- Non compacted IPv6 address conflict after reload HOT 1
- Unfriendly error message with `firewall-cmd --load-zone-defaults` without customization.
- Feature request: Add a functionality for services/ports/protocols to be filtered first and then source IP HOT 2
- PolicyKit authentication attempt on startup of firewall-config times out after 25 seconds HOT 10
- Ceph highest port number is outdated
- usability: default target is not shown on zone-info HOT 4
- firewall-offline-cmd fails to enable/disable lockdown HOT 1
- DB connection fails with port 5432 with docker HOT 11
- Entry check fails for IP sets combining CIDRs and ranges HOT 1
- firewalld reload/restart flushes tables not part of firewalld rules on version: 0.9.11 HOT 4
- Firewalld fails to load IP sets with overlapping entries HOT 2
- Firewalld goes into a failed state when adding overlapping intervals as IP set entries
- document icmp reject types in manpage firewalld.richlanguage
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from firewalld.