On 4/11/21 8:20 AM, Jonathan Ryshpan wrote:
Looking through the system logs (journalctl --boot), I stumbled on the following error messages from firewalld; it looks like the function iptables-restore is called fairly frequently, generally after the system wakes up from sleep, and never succeeds. The intervening lines vary. Is this something to worry about?
I would say yes. (I don't use firewalld and still write my own iptables rules. perhaps firewalld covers this but IDK). When you see an iptables?-restore error it means the rule set was not loaded. If there was no previous rule set in place you are running wide open (unless your default policies are DROP).
Apr 09 07:16:49 amito firewalld[926]: ERROR: '/usr/sbin/iptables- restore -w -n' failed: iptables-restore: line 9 failed Apr 09 07:16:46 amito systemd[1]: Started Hostname Service. Apr 09 07:16:49 amito firewalld[926]: ERROR: '/usr/sbin/ip6tables- restore -w -n' failed: ip6tables-restore: line 9 failed Apr 09 07:16:46 amito NetworkManager[1020]: <info> [1617977806.4768] hostname: hostname: using hostnamed Apr 09 07:16:49 amito firewalld[926]: ERROR: COMMAND_FAILED: '/usr/sbin/ip6tables-restore -w -n' failed: ip6tables-restore: line 9 failed _______________________________________________ users mailing list -- users@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to users-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/users@xxxxxxxxxxxxxxxxxxxxxxx Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
_______________________________________________ users mailing list -- users@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to users-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/users@xxxxxxxxxxxxxxxxxxxxxxx Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
