You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
When using bridge networking (default or custom) with docker in CentOS 10, the following error are reported in firewalld and containers are not reachable:
Jan 20 10:44:56 testmc systemd[1]: Started firewalld.service - firewalld - dynamic firewall daemon.
Jan 20 11:08:58 testmc firewalld[909]: WARNING: COMMAND_FAILED: '/usr/sbin/iptables -w10 -t nat -D PREROUTING -m addrtype --dst-type LOCAL -j DOCKER' failed: iptables v1.8.11 (nf_tables): Chain 'DOCKER' does n> Try `iptables -h' or 'iptables --help' for more information.
Jan 20 11:08:58 testmc firewalld[909]: WARNING: COMMAND_FAILED: '/usr/sbin/iptables -w10 -t nat -D OUTPUT -m addrtype --dst-type LOCAL ! --dst 127.0.0.0/8 -j DOCKER' failed: iptables v1.8.11 (nf_tables): Chain> Try `iptables -h' or 'iptables --help' for more information.
Jan 20 11:08:58 testmc firewalld[909]: WARNING: COMMAND_FAILED: '/usr/sbin/iptables -w10 -t nat -D OUTPUT -m addrtype --dst-type LOCAL -j DOCKER' failed: iptables v1.8.11 (nf_tables): Chain 'DOCKER' does not e> Try `iptables -h' or 'iptables --help' for more information.
Jan 20 11:08:58 testmc firewalld[909]: WARNING: COMMAND_FAILED: '/usr/sbin/iptables -w10 -t nat -D PREROUTING' failed: iptables: Bad rule (does a matching rule exist in that chain?).
Jan 20 11:08:58 testmc firewalld[909]: WARNING: COMMAND_FAILED: '/usr/sbin/iptables -w10 -t nat -D OUTPUT' failed: iptables: Bad rule (does a matching rule exist in that chain?).
Jan 20 11:08:58 testmc firewalld[909]: WARNING: COMMAND_FAILED: '/usr/sbin/iptables -w10 -t nat -F DOCKER' failed: iptables: No chain/target/match by that name.
Jan 20 11:08:58 testmc firewalld[909]: WARNING: COMMAND_FAILED: '/usr/sbin/iptables -w10 -t nat -X DOCKER' failed: iptables: No chain/target/match by that name.
Jan 20 11:08:58 testmc firewalld[909]: WARNING: COMMAND_FAILED: '/usr/sbin/iptables -w10 -t filter -F DOCKER' failed: iptables: No chain/target/match by that name.
Jan 20 11:08:59 testmc firewalld[909]: WARNING: COMMAND_FAILED: '/usr/sbin/iptables -w10 -t filter -X DOCKER' failed: iptables: No chain/target/match by that name.
Jan 20 11:08:59 testmc firewalld[909]: WARNING: COMMAND_FAILED: '/usr/sbin/iptables -w10 -t filter -F DOCKER-ISOLATION-STAGE-1' failed: iptables: No chain/target/match by that name.
Jan 20 11:08:59 testmc firewalld[909]: WARNING: COMMAND_FAILED: '/usr/sbin/iptables -w10 -t filter -X DOCKER-ISOLATION-STAGE-1' failed: iptables: No chain/target/match by that name.
Jan 20 11:08:59 testmc firewalld[909]: WARNING: COMMAND_FAILED: '/usr/sbin/iptables -w10 -t filter -F DOCKER-ISOLATION-STAGE-2' failed: iptables: No chain/target/match by that name.
Jan 20 11:08:59 testmc firewalld[909]: WARNING: COMMAND_FAILED: '/usr/sbin/iptables -w10 -t filter -X DOCKER-ISOLATION-STAGE-2' failed: iptables: No chain/target/match by that name.
Jan 20 11:08:59 testmc firewalld[909]: WARNING: COMMAND_FAILED: '/usr/sbin/iptables -w10 -t filter -F DOCKER-ISOLATION' failed: iptables: No chain/target/match by that name.
Jan 20 11:08:59 testmc firewalld[909]: WARNING: COMMAND_FAILED: '/usr/sbin/iptables -w10 -t filter -X DOCKER-ISOLATION' failed: iptables: No chain/target/match by that name.
Jan 20 11:08:59 testmc firewalld[909]: WARNING: COMMAND_FAILED: '/usr/sbin/ip6tables -w10 -t nat -D PREROUTING -m addrtype --dst-type LOCAL -j DOCKER' failed: ip6tables v1.8.11 (nf_tables): Chain 'DOCKER' does> Try `ip6tables -h' or 'ip6tables --help' for more information.
Jan 20 11:08:59 testmc firewalld[909]: WARNING: COMMAND_FAILED: '/usr/sbin/ip6tables -w10 -t nat -D OUTPUT -m addrtype --dst-type LOCAL ! --dst ::1/128 -j DOCKER' failed: ip6tables v1.8.11 (nf_tables): Chain '> Try `ip6tables -h' or 'ip6tables --help' for more information.
Jan 20 11:08:59 testmc firewalld[909]: WARNING: COMMAND_FAILED: '/usr/sbin/ip6tables -w10 -t nat -D OUTPUT -m addrtype --dst-type LOCAL -j DOCKER' failed: ip6tables v1.8.11 (nf_tables): Chain 'DOCKER' does not> Try `ip6tables -h' or 'ip6tables --help' for more information.
Jan 20 11:08:59 testmc firewalld[909]: WARNING: COMMAND_FAILED: '/usr/sbin/ip6tables -w10 -t nat -D PREROUTING' failed: ip6tables: Bad rule (does a matching rule exist in that chain?).
Jan 20 11:08:59 testmc firewalld[909]: WARNING: COMMAND_FAILED: '/usr/sbin/ip6tables -w10 -t nat -D OUTPUT' failed: ip6tables: Bad rule (does a matching rule exist in that chain?).
Jan 20 11:08:59 testmc firewalld[909]: WARNING: COMMAND_FAILED: '/usr/sbin/ip6tables -w10 -t nat -F DOCKER' failed: ip6tables: No chain/target/match by that name.
Jan 20 11:08:59 testmc firewalld[909]: WARNING: COMMAND_FAILED: '/usr/sbin/ip6tables -w10 -t nat -X DOCKER' failed: ip6tables: No chain/target/match by that name.
Jan 20 11:08:59 testmc firewalld[909]: WARNING: COMMAND_FAILED: '/usr/sbin/ip6tables -w10 -t filter -F DOCKER' failed: ip6tables: No chain/target/match by that name.
Jan 20 11:08:59 testmc firewalld[909]: WARNING: COMMAND_FAILED: '/usr/sbin/ip6tables -w10 -t filter -X DOCKER' failed: ip6tables: No chain/target/match by that name.
Jan 20 11:08:59 testmc firewalld[909]: WARNING: COMMAND_FAILED: '/usr/sbin/ip6tables -w10 -t filter -F DOCKER-ISOLATION-STAGE-1' failed: ip6tables: No chain/target/match by that name.
Jan 20 11:08:59 testmc firewalld[909]: WARNING: COMMAND_FAILED: '/usr/sbin/ip6tables -w10 -t filter -X DOCKER-ISOLATION-STAGE-1' failed: ip6tables: No chain/target/match by that name.
Jan 20 11:08:59 testmc firewalld[909]: WARNING: COMMAND_FAILED: '/usr/sbin/ip6tables -w10 -t filter -F DOCKER-ISOLATION-STAGE-2' failed: ip6tables: No chain/target/match by that name.
Jan 20 11:08:59 testmc firewalld[909]: WARNING: COMMAND_FAILED: '/usr/sbin/ip6tables -w10 -t filter -X DOCKER-ISOLATION-STAGE-2' failed: ip6tables: No chain/target/match by that name.
Jan 20 11:08:59 testmc firewalld[909]: WARNING: COMMAND_FAILED: '/usr/sbin/ip6tables -w10 -t filter -F DOCKER-ISOLATION' failed: ip6tables: No chain/target/match by that name.
Jan 20 11:08:59 testmc firewalld[909]: WARNING: COMMAND_FAILED: '/usr/sbin/ip6tables -w10 -t filter -X DOCKER-ISOLATION' failed: ip6tables: No chain/target/match by that name.
```
The text was updated successfully, but these errors were encountered:
When using bridge networking (default or custom) with docker in CentOS 10, the following error are reported in firewalld and containers are not reachable:
The text was updated successfully, but these errors were encountered: