Can't start firewalld

Asked Oct 22 '16 at 05:38

Active Oct 22 '16 at 05:38

Viewed 1,476 times

I restarted my VPS and now firewalld isn't running and I can't seem to start it.

# systemctl is-enabled firewalld
enabled

# systemctl is-active firewalld
active

# firewall-cmd --state
not running

# firewall-cmd --reload
Error: '/sbin/ip6tables -t raw -I PREROUTING 2 -m rpfilter --invert -j DROP' failed: ip6tables: No chain/target/match by that name.

I'm at a loss for what to do next. I'm not sure where this iptables rule is defined. I know if I try to type the command by itself:

# /sbin/ip6tables -t raw -I PREROUTING 2 -m rpfilter --invert -j DROP
ip6tables: No chain/target/match by that name.

This is CentOS7

asked Oct 22 '16 at 05:38

Jake Wilson

8,814
29
97
125

Please post the output of `virt-what`. (If it's not installed, install it first.) – Michael Hampton Oct 22 '16 at 05:45
Its openvz. This was all working fine a few days ago. It wasn't until I restarted the VPS that all this weirdness began. – Jake Wilson Oct 22 '16 at 05:48
I discovered that the above error is related to the `firewalld.conf` setting `IPv6_rpfilter=yes`. If I set it to `no`, then I don't get the error anymore. But I'm not clear about if I need to have that setting enabled or not. – Jake Wilson Oct 22 '16 at 05:48
Your host broke it. They will have to fix it. – Michael Hampton Oct 22 '16 at 05:56

Can't start firewalld

0 Answers0