Your message dated Sat, 28 Feb 2026 10:04:01 +0000
with message-id <[email protected]>
and subject line Bug#1128686: fixed in iptables 1.8.12-2
has caused the Debian Bug report #1128686,
regarding libvirt-daemon: Error starting network
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1128686: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1128686
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: libvirt-daemon
Version: 12.0.0-1
Severity: important
X-Debbugs-Cc: [email protected]
I've had a basic working libvirt configuration for years - a default
network, with a few VMs attached to it. It has suddenly stopped working
- for some reason, libvirt can't start the network:
*****
~# virsh net-start default
error: Failed to start network default
error: internal error: Failed to run firewall command iptables -w --table
filter --list-rules:
*****
When using virt-manager, I get:
*****
Error starting network 'default': internal error: Failed to run firewall
command iptables -w --table filter --list-rules:
Traceback (most recent call last):
File "/usr/share/virt-manager/virtManager/asyncjob.py", line 67, in cb_wrapper
callback(asyncjob, *args, **kwargs)
~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/usr/share/virt-manager/virtManager/asyncjob.py", line 101, in tmpcb
callback(*args, **kwargs)
~~~~~~~~^^^^^^^^^^^^^^^^^
File "/usr/share/virt-manager/virtManager/object/libvirtobject.py", line 57,
in newfn
ret = fn(self, *args, **kwargs)
File "/usr/share/virt-manager/virtManager/object/network.py", line 61, in
start
self._backend.create()
~~~~~~~~~~~~~~~~~~~~^^
File "/usr/lib/python3/dist-packages/libvirt.py", line 3623, in create
raise libvirtError('virNetworkCreate() failed')
libvirt.libvirtError: internal error: Failed to run firewall command iptables
-w --table filter --list-rules:
*****
I have no idea what this means: iptables is installed, and "iptables -w
--table filter --list-rules" runs fine from the command line. Restarting
the libvirt-daemon service doesn't solve the problem. I've seen the
following reports, but I haven't found any solutions there for my case:
https://bugs-devel.debian.org/cgi-bin/bugreport.cgi?bug=994127
https://lists.libvirt.org/archives/list/[email protected]/thread/LEKG4HCKYKF5P55A4M64TZIWKUXKZDOE/
-- System Information:
Debian Release: forky/sid
APT prefers oldstable-security
APT policy: (500, 'oldstable-security'), (500, 'unstable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386
Kernel: Linux 6.18.12+deb14-amd64 (SMP w/16 CPU threads; PREEMPT)
Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_OOT_MODULE
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE=en_US
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
Versions of packages libvirt-daemon depends on:
ii libc6 2.42-13
ii libgcc-s1 15.2.0-14
ii libglib2.0-0t64 2.87.2-3
ii libtirpc3t64 1.3.6+ds-1
ii libvirt-common 12.0.0-1
ii libvirt-daemon-common 12.0.0-1
ii libvirt-daemon-log 12.0.0-1
ii libvirt0 12.0.0-1
ii libxml2-16 2.15.1+dfsg-2+b1
ii logrotate 3.22.0-1
Versions of packages libvirt-daemon recommends:
ii libvirt-daemon-driver-interface 12.0.0-1
ii libvirt-daemon-driver-network 12.0.0-1
ii libvirt-daemon-driver-nodedev 12.0.0-1
ii libvirt-daemon-driver-nwfilter 12.0.0-1
ii libvirt-daemon-driver-qemu 12.0.0-1
ii libvirt-daemon-driver-secret 12.0.0-1
ii libvirt-daemon-driver-storage 12.0.0-1
ii libvirt-daemon-driver-storage-disk 12.0.0-1
ii libvirt-daemon-driver-storage-iscsi 12.0.0-1
ii libvirt-daemon-driver-storage-logical 12.0.0-1
ii libvirt-daemon-driver-storage-mpath 12.0.0-1
ii libvirt-daemon-driver-storage-scsi 12.0.0-1
ii libvirt-daemon-lock 12.0.0-1
ii libvirt-daemon-plugin-lockd 12.0.0-1
Versions of packages libvirt-daemon suggests:
ii libvirt-daemon-driver-lxc 12.0.0-1
pn libvirt-daemon-driver-storage-gluster <none>
pn libvirt-daemon-driver-storage-iscsi-direct <none>
pn libvirt-daemon-driver-storage-rbd <none>
pn libvirt-daemon-driver-storage-zfs <none>
ii libvirt-daemon-driver-vbox 12.0.0-1
ii libvirt-daemon-driver-xen 12.0.0-1
ii libvirt-daemon-system 12.0.0-1
-- debconf-show failed
--- End Message ---
--- Begin Message ---
Source: iptables
Source-Version: 1.8.12-2
Done: Jeremy Sowden <[email protected]>
We believe that the bug you reported is fixed in the latest version of
iptables, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Jeremy Sowden <[email protected]> (supplier of updated iptables package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Fri, 27 Feb 2026 22:50:18 +0000
Source: iptables
Architecture: source
Version: 1.8.12-2
Distribution: unstable
Urgency: medium
Maintainer: Debian Netfilter Packaging Team
<[email protected]>
Changed-By: Jeremy Sowden <[email protected]>
Closes: 1128561 1128686 1129179
Changes:
iptables (1.8.12-2) unstable; urgency=medium
.
* [7742aa0] d/patches: revert libxtables refusal to run with capabilities
(Closes: #1128561, #1128686, #1129179)
Checksums-Sha1:
d5ce290dbe99b6c65876c16b45ee96af747da84d 3032 iptables_1.8.12-2.dsc
fb0fc313d082f3704dd5e237d49d407cb993322d 29476 iptables_1.8.12-2.debian.tar.xz
c47c9397d2b9b912e76ac1927601d44dd7550d27 9792 iptables_1.8.12-2_amd64.buildinfo
Checksums-Sha256:
bea35aecf8ac5ff37d2d99547cbbcde9c688969b09ac2bbf49aead393ab16203 3032
iptables_1.8.12-2.dsc
847d8e9cc3130ed51d4bb447e1f1ec3a101f3e74ca1f4cd4b4abb4af3eccd50d 29476
iptables_1.8.12-2.debian.tar.xz
3f8263bc048f09464f4fb438bd11a518205a9412e418e0871ab77d18c71fe48a 9792
iptables_1.8.12-2_amd64.buildinfo
Files:
b290b548927990d1dfc2a16f91bbae4a 3032 net optional iptables_1.8.12-2.dsc
22225e1905d7321c369a5ef2c08d0187 29476 net optional
iptables_1.8.12-2.debian.tar.xz
6770eb7c61f951670523843bba643845 9792 net optional
iptables_1.8.12-2_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=QCSh
-----END PGP SIGNATURE-----
pgpig_OV4iM6u.pgp
Description: PGP signature
--- End Message ---
