Replies: 4 comments 9 replies
-
|
My bad, didn't provide enough information. I saw some of these below in previous posts (from multiple years ago), stating that some of the configurations above should resolve this ( |
Beta Was this translation helpful? Give feedback.
-
|
have you tried adding privileged to the container? |
Beta Was this translation helpful? Give feedback.
-
|
I did try with adding privileged as well. Updated compose file version to It still had the first error as seen above, along with a new error preventing the container from even starting: |
Beta Was this translation helpful? Give feedback.
-
|
To clarify, with It just appears the firewall rules are not working as expected. And I'm not well versed in configuring ufw firewall rules. The error if [[ "${ENABLE_UFW,,}" == "true" ]]; then
# sed -i -e s/IPV6=yes/IPV6=no/ /etc/default/ufw ## moved this here
if [[ "${UFW_DISABLE_IPTABLES_REJECT,,}" == "true" ]]; then
# A horrible hack to ufw to prevent it detecting the ability to limit and REJECT traffic
sed -i 's/return caps/return []/g' /usr/lib/python3/dist-packages/ufw/util.py
# force a rewrite on the enable below
echo "empty firewall rules and restart" ## changed verbage here
ufw disable
echo "" > /etc/ufw/user.rules ## <--- here is what i'm refering too guess these other commented lines could be a way to prevent this error msg from logging
ufw enable 2> /dev/null # added this here and supressed the error message
# else ## added else statement here
# echo "enabling firewall" ## moved this here
# ufw enable ## moved this here
fi
# Enable firewall
echo "enabling firewall" ## moved inside the else statement above
sed -i -e s/IPV6=yes/IPV6=no/ /etc/default/ufw ## move this up above the second if-statement
ufw enable ## move this to an else statementYou can see it creates the routes after this error message: Then if I issue Issue |
Beta Was this translation helpful? Give feedback.
-
|
If I disable the firewall, I can see my incoming connection via: I also tested by adding the rule: |
Beta Was this translation helpful? Give feedback.
-
|
@mil1i Did you ever get anwhere with this? I remember I've tried it on my Syno as well some time ago (I'm on DSM 6). I can also remember that I ran into the same problem and I searched Issues/Commits here. At that time I read somewhere that the |
Beta Was this translation helpful? Give feedback.
-
I was not ever able to find a resolution to get the |
Beta Was this translation helpful? Give feedback.
-
Thanks for the answer. Yeah, same goes for me, I probably tried it end of last year I believe. Might need to get back on it as well but I believe it's not straight forward on Syno. |
Beta Was this translation helpful? Give feedback.
-
|
What you think about replace REJECT rule with DROP? https://serverfault.com/questions/606388/iptables-reject-not-working-but-drop-does |
Beta Was this translation helpful? Give feedback.
-
|
I ran into the same issue, I don't suppose there's any solution? |
Beta Was this translation helpful? Give feedback.
-
My configuration works without issue so long as I keep
ENABLE_UFW=false.Hello,
Just came across this as my server died, and I'm trying to get things running on my NAS til I get it back up / replaced. Love this all-in-one piece for transmission + openvpn! Much cleaner than what I was using before, thank you! :)
One part I am stuck on at the moment is getting this working with the
ENABLE_UFW=true. I'm wondering if anyone has been able to get this work.I only see one error in the logs during start, and it appears to be expected as the script is clearing out
/etc/ufw/user.rules:Here's my docker-compose.yaml configuration.
From the NAS CLI:
I've tested a number of things. I've tried widening the
LOCAL_NETWORKfrom/24to/16. I added in the default docker bridge network. I've also tried settingUFW_ALLOW_GW_NET=true, as well as adding additional PORTS to allowUFW_EXTRA_PORTS=80,443. I've also triednet.ipv6.conf.all.disable_ipv6=0. I also tried playing with theWEBPROXY_to no avail. Tried without dropping default route.My setup is also utilizing the NAS's built-in reverse proxy. I cannot access the UI whether I hit
IP:PORTdirectly, or via the reverse proxy address.Beta Was this translation helpful? Give feedback.
All reactions