Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

CentOS 10 docker iptable issue #2435

Open
Nerd-Turtle opened this issue Jan 20, 2025 · 0 comments
Open

CentOS 10 docker iptable issue #2435

Nerd-Turtle opened this issue Jan 20, 2025 · 0 comments

Comments

@Nerd-Turtle
Copy link

Nerd-Turtle commented Jan 20, 2025

When using bridge networking (default or custom) with docker in CentOS 10, the following error are reported in firewalld and containers are not reachable:

Jan 20 10:44:56 testmc systemd[1]: Started firewalld.service - firewalld - dynamic firewall daemon.
Jan 20 11:08:58 testmc firewalld[909]: WARNING: COMMAND_FAILED: '/usr/sbin/iptables -w10 -t nat -D PREROUTING -m addrtype --dst-type LOCAL -j DOCKER' failed: iptables v1.8.11 (nf_tables): Chain 'DOCKER' does n>                                       Try `iptables -h' or 'iptables --help' for more information.
Jan 20 11:08:58 testmc firewalld[909]: WARNING: COMMAND_FAILED: '/usr/sbin/iptables -w10 -t nat -D OUTPUT -m addrtype --dst-type LOCAL ! --dst 127.0.0.0/8 -j DOCKER' failed: iptables v1.8.11 (nf_tables): Chain>                                       Try `iptables -h' or 'iptables --help' for more information.
Jan 20 11:08:58 testmc firewalld[909]: WARNING: COMMAND_FAILED: '/usr/sbin/iptables -w10 -t nat -D OUTPUT -m addrtype --dst-type LOCAL -j DOCKER' failed: iptables v1.8.11 (nf_tables): Chain 'DOCKER' does not e>                                       Try `iptables -h' or 'iptables --help' for more information.
Jan 20 11:08:58 testmc firewalld[909]: WARNING: COMMAND_FAILED: '/usr/sbin/iptables -w10 -t nat -D PREROUTING' failed: iptables: Bad rule (does a matching rule exist in that chain?).
Jan 20 11:08:58 testmc firewalld[909]: WARNING: COMMAND_FAILED: '/usr/sbin/iptables -w10 -t nat -D OUTPUT' failed: iptables: Bad rule (does a matching rule exist in that chain?).
Jan 20 11:08:58 testmc firewalld[909]: WARNING: COMMAND_FAILED: '/usr/sbin/iptables -w10 -t nat -F DOCKER' failed: iptables: No chain/target/match by that name.
Jan 20 11:08:58 testmc firewalld[909]: WARNING: COMMAND_FAILED: '/usr/sbin/iptables -w10 -t nat -X DOCKER' failed: iptables: No chain/target/match by that name.
Jan 20 11:08:58 testmc firewalld[909]: WARNING: COMMAND_FAILED: '/usr/sbin/iptables -w10 -t filter -F DOCKER' failed: iptables: No chain/target/match by that name.
Jan 20 11:08:59 testmc firewalld[909]: WARNING: COMMAND_FAILED: '/usr/sbin/iptables -w10 -t filter -X DOCKER' failed: iptables: No chain/target/match by that name.
Jan 20 11:08:59 testmc firewalld[909]: WARNING: COMMAND_FAILED: '/usr/sbin/iptables -w10 -t filter -F DOCKER-ISOLATION-STAGE-1' failed: iptables: No chain/target/match by that name.
Jan 20 11:08:59 testmc firewalld[909]: WARNING: COMMAND_FAILED: '/usr/sbin/iptables -w10 -t filter -X DOCKER-ISOLATION-STAGE-1' failed: iptables: No chain/target/match by that name.
Jan 20 11:08:59 testmc firewalld[909]: WARNING: COMMAND_FAILED: '/usr/sbin/iptables -w10 -t filter -F DOCKER-ISOLATION-STAGE-2' failed: iptables: No chain/target/match by that name.
Jan 20 11:08:59 testmc firewalld[909]: WARNING: COMMAND_FAILED: '/usr/sbin/iptables -w10 -t filter -X DOCKER-ISOLATION-STAGE-2' failed: iptables: No chain/target/match by that name.
Jan 20 11:08:59 testmc firewalld[909]: WARNING: COMMAND_FAILED: '/usr/sbin/iptables -w10 -t filter -F DOCKER-ISOLATION' failed: iptables: No chain/target/match by that name.
Jan 20 11:08:59 testmc firewalld[909]: WARNING: COMMAND_FAILED: '/usr/sbin/iptables -w10 -t filter -X DOCKER-ISOLATION' failed: iptables: No chain/target/match by that name.
Jan 20 11:08:59 testmc firewalld[909]: WARNING: COMMAND_FAILED: '/usr/sbin/ip6tables -w10 -t nat -D PREROUTING -m addrtype --dst-type LOCAL -j DOCKER' failed: ip6tables v1.8.11 (nf_tables): Chain 'DOCKER' does>                                       Try `ip6tables -h' or 'ip6tables --help' for more information.
Jan 20 11:08:59 testmc firewalld[909]: WARNING: COMMAND_FAILED: '/usr/sbin/ip6tables -w10 -t nat -D OUTPUT -m addrtype --dst-type LOCAL ! --dst ::1/128 -j DOCKER' failed: ip6tables v1.8.11 (nf_tables): Chain '>                                       Try `ip6tables -h' or 'ip6tables --help' for more information.
Jan 20 11:08:59 testmc firewalld[909]: WARNING: COMMAND_FAILED: '/usr/sbin/ip6tables -w10 -t nat -D OUTPUT -m addrtype --dst-type LOCAL -j DOCKER' failed: ip6tables v1.8.11 (nf_tables): Chain 'DOCKER' does not>                                       Try `ip6tables -h' or 'ip6tables --help' for more information.
Jan 20 11:08:59 testmc firewalld[909]: WARNING: COMMAND_FAILED: '/usr/sbin/ip6tables -w10 -t nat -D PREROUTING' failed: ip6tables: Bad rule (does a matching rule exist in that chain?).
Jan 20 11:08:59 testmc firewalld[909]: WARNING: COMMAND_FAILED: '/usr/sbin/ip6tables -w10 -t nat -D OUTPUT' failed: ip6tables: Bad rule (does a matching rule exist in that chain?).
Jan 20 11:08:59 testmc firewalld[909]: WARNING: COMMAND_FAILED: '/usr/sbin/ip6tables -w10 -t nat -F DOCKER' failed: ip6tables: No chain/target/match by that name.
Jan 20 11:08:59 testmc firewalld[909]: WARNING: COMMAND_FAILED: '/usr/sbin/ip6tables -w10 -t nat -X DOCKER' failed: ip6tables: No chain/target/match by that name.
Jan 20 11:08:59 testmc firewalld[909]: WARNING: COMMAND_FAILED: '/usr/sbin/ip6tables -w10 -t filter -F DOCKER' failed: ip6tables: No chain/target/match by that name.
Jan 20 11:08:59 testmc firewalld[909]: WARNING: COMMAND_FAILED: '/usr/sbin/ip6tables -w10 -t filter -X DOCKER' failed: ip6tables: No chain/target/match by that name.
Jan 20 11:08:59 testmc firewalld[909]: WARNING: COMMAND_FAILED: '/usr/sbin/ip6tables -w10 -t filter -F DOCKER-ISOLATION-STAGE-1' failed: ip6tables: No chain/target/match by that name.
Jan 20 11:08:59 testmc firewalld[909]: WARNING: COMMAND_FAILED: '/usr/sbin/ip6tables -w10 -t filter -X DOCKER-ISOLATION-STAGE-1' failed: ip6tables: No chain/target/match by that name.
Jan 20 11:08:59 testmc firewalld[909]: WARNING: COMMAND_FAILED: '/usr/sbin/ip6tables -w10 -t filter -F DOCKER-ISOLATION-STAGE-2' failed: ip6tables: No chain/target/match by that name.
Jan 20 11:08:59 testmc firewalld[909]: WARNING: COMMAND_FAILED: '/usr/sbin/ip6tables -w10 -t filter -X DOCKER-ISOLATION-STAGE-2' failed: ip6tables: No chain/target/match by that name.
Jan 20 11:08:59 testmc firewalld[909]: WARNING: COMMAND_FAILED: '/usr/sbin/ip6tables -w10 -t filter -F DOCKER-ISOLATION' failed: ip6tables: No chain/target/match by that name.
Jan 20 11:08:59 testmc firewalld[909]: WARNING: COMMAND_FAILED: '/usr/sbin/ip6tables -w10 -t filter -X DOCKER-ISOLATION' failed: ip6tables: No chain/target/match by that name.
```
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant