[CentOS] Firewalld broken on Centos7?

2015-08-19 Thread Andrew Holway
Hi,

I have a standard Centos7 AMI. Can anyone tell me whats happening here?

Thanks,

Andrew
Aug 19 11:17:23 master dhclient[22897]: bound to 10.141.10.49 -- renewal in
1795 seconds.
Aug 19 11:17:24 master network: Determining IP information for eth0... done.
Aug 19 11:17:24 master network: [  OK  ]
Aug 19 11:17:24 master systemd: Started LSB: Bring up/down networking.
Aug 19 11:23:43 master firewalld: 2015-08-19 11:23:43 ERROR: Failed to
apply rules. A firewall reload might solve the issue if the firewall has
been modified using ip*tables or ebtables.
Aug 19 11:23:43 master firewalld: 2015-08-19 11:23:43 ERROR:
'/sbin/iptables -D INPUT_ZONES -t filter -i eth0 -g IN_public' failed:
iptables: No chain/target/match by that name.
Aug 19 11:23:43 master firewalld: 2015-08-19 11:23:43 ERROR:
COMMAND_FAILED: '/sbin/iptables -D INPUT_ZONES -t filter -i eth0 -g
IN_public' failed: iptables: No chain/target/match by that name.
Aug 19 11:35:58 master yum[23685]: Erased:
cloud-init-0.7.5-10.el7.centos.1.x86_64
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Firewalld broken on Centos7?

2015-08-19 Thread Chris Murphy
On Wed, Aug 19, 2015 at 5:54 AM, Andrew Holway andrew.hol...@gmail.com wrote:
 Hi,

 I have a standard Centos7 AMI. Can anyone tell me whats happening here?

 Thanks,

 Andrew
 Aug 19 11:17:23 master dhclient[22897]: bound to 10.141.10.49 -- renewal in
 1795 seconds.
 Aug 19 11:17:24 master network: Determining IP information for eth0... done.
 Aug 19 11:17:24 master network: [  OK  ]
 Aug 19 11:17:24 master systemd: Started LSB: Bring up/down networking.
 Aug 19 11:23:43 master firewalld: 2015-08-19 11:23:43 ERROR: Failed to
 apply rules. A firewall reload might solve the issue if the firewall has
 been modified using ip*tables or ebtables.
 Aug 19 11:23:43 master firewalld: 2015-08-19 11:23:43 ERROR:
 '/sbin/iptables -D INPUT_ZONES -t filter -i eth0 -g IN_public' failed:
 iptables: No chain/target/match by that name.
 Aug 19 11:23:43 master firewalld: 2015-08-19 11:23:43 ERROR:
 COMMAND_FAILED: '/sbin/iptables -D INPUT_ZONES -t filter -i eth0 -g
 IN_public' failed: iptables: No chain/target/match by that name.
 Aug 19 11:35:58 master yum[23685]: Erased:
 cloud-init-0.7.5-10.el7.centos.1.x86_64

Firewalld and iptables are mutually exclusive, at least on Fedora.
There might be some use case for combining static and dynamic rules
(?) but I'd expect you should disable one or the other.

-- 
Chris Murphy
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos