-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
On Wed, Nov 30, 2016 at 09:19:06PM +0300, Eva Star wrote:
> On 11/27/2016 02:04 AM, Marek Marczykowski-Górecki wrote:
>
> > Do you see some correlation with:
> > - starting/stopping another VM?
> > - affected VMs have or not firewall rules?
> >
> > Also, check if restarting qubes-firewall service in sys-firewall helps
> > (and check it status first).
> >
>
> Seems I have the same issue! (Maybe) I think it's correlate with CHECKING
> UPDATES on dom0 or templates. When Qubes do that check - other VM still not
> responsive. I wrote about this at the Xen 4.6.3 thread.
More troubleshooting steps:
1. When problem appears, try in sys-firewall:
qubesdb-read /qubes-iptables-error
This should print last error of firewall reload. I guess it may be about
some DNS resolution failure (if any rule use DNS name instead of IP).
This shouldn't affect all the VMs - only the one for which name
resolution failed, but maybe something is wrong here.
2. Check status and logs of qubes-firewall service:
sudo systemctl status qubes-firewall
Should be "active (running)" and a series of "qubes-firewall[xxx]:
/qubes-iptables" messages. If you see anything else, let me know.
3. Restart qubes-firewall service and see whether it helps:
sudo systemctl restart qubes-firewall
- --
Best Regards,
Marek Marczykowski-Górecki
Invisible Things Lab
A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
iQEcBAEBCAAGBQJYRCXvAAoJENuP0xzK19cshjgH/iMyhpSkETZP6FyNKTuhlQaZ
T04mPxIpGtkVYnDythtCkhqmJXg+mrtJPOF8SUuVTh4cMC6SyFfkTdkjCjj+yBPo
elMvBV6OX5H261Jds2tmmBJ3OGQDWrLexp/q5aP/y6qehG/9Bc7rAo2Aj8YjeV0T
i5EwAG6b+YHfKfWDPR4HWSpfaBIHHfrvPABgVmWAcg8Onj5sKFGYEe5pYFMMe8k0
zjzEuZiUNZrQwygnaZHFI26vGpc8WMnavXDXXeMzo1yndhZKs9fcyptYvvu2dNSQ
kvm6akyArHpmv3bYetfx/cTKNLGClSG/XW5cQXPheHCZH0RHWtEUm0lQxeP8uhc=
=PQ/6
-----END PGP SIGNATURE-----
--
You received this message because you are subscribed to the Google Groups
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/qubes-users/20161204141926.GR1145%40mail-itl.
For more options, visit https://groups.google.com/d/optout.
