Docker - firewalld errors

Issues related to applications and software problems
Przemas
Posts: 37
Joined: 2015/07/22 11:32:28

Docker - firewalld errors

Postby Przemas » 2017/03/20 21:57:33

While I've been trying to get network discovery working I've noticed some Docker errors reported by firewalld. Here's a sample:

Code: Select all

# systemctl status firewalld -l
● firewalld.service - firewalld - dynamic firewall daemon
   Loaded: loaded (/usr/lib/systemd/system/firewalld.service; enabled; vendor preset: enabled)
   Active: active (running) since pon 2017-03-20 20:51:20 CET; 2h 3min ago
     Docs: man:firewalld(1)
 Main PID: 1289 (firewalld)
   Memory: 38.2M
   CGroup: /system.slice/firewalld.service
           └─1289 /usr/bin/python -Es /usr/sbin/firewalld --nofork --nopid

mar 20 20:51:29 dualxeon.domek firewalld[1289]: WARNING: COMMAND_FAILED: '/usr/sbin/iptables -w2 -t nat -C OUTPUT -m addrtype --dst-type LOCAL -j DOCKER ! --dst 127.0.0.0/8' failed:
mar 20 20:51:29 dualxeon.domek firewalld[1289]: WARNING: COMMAND_FAILED: '/usr/sbin/iptables -w2 -t filter -C FORWARD -o docker0 -j DOCKER' failed:
mar 20 20:51:29 dualxeon.domek firewalld[1289]: WARNING: COMMAND_FAILED: '/usr/sbin/iptables -w2 -t filter -C FORWARD -j DOCKER-ISOLATION' failed:
mar 20 20:51:29 dualxeon.domek firewalld[1289]: WARNING: COMMAND_FAILED: '/usr/sbin/iptables -w2 -t nat -C POSTROUTING -s 172.17.0.0/16 ! -o docker0 -j MASQUERADE' failed:
mar 20 20:51:29 dualxeon.domek firewalld[1289]: WARNING: COMMAND_FAILED: '/usr/sbin/iptables -w2 -t nat -C DOCKER -i docker0 -j RETURN' failed:
mar 20 20:51:29 dualxeon.domek firewalld[1289]: WARNING: COMMAND_FAILED: '/usr/sbin/iptables -w2 -D FORWARD -i docker0 -o docker0 -j DROP' failed:
mar 20 20:51:29 dualxeon.domek firewalld[1289]: WARNING: COMMAND_FAILED: '/usr/sbin/iptables -w2 -t filter -C FORWARD -i docker0 -o docker0 -j ACCEPT' failed:
mar 20 20:51:30 dualxeon.domek firewalld[1289]: WARNING: COMMAND_FAILED: '/usr/sbin/iptables -w2 -t filter -C FORWARD -i docker0 ! -o docker0 -j ACCEPT' failed:
mar 20 20:51:30 dualxeon.domek firewalld[1289]: WARNING: COMMAND_FAILED: '/usr/sbin/iptables -w2 -t filter -C FORWARD -o docker0 -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT' failed:
mar 20 20:51:30 dualxeon.domek firewalld[1289]: WARNING: COMMAND_FAILED: '/usr/sbin/iptables -w2 -t filter -C FORWARD -o docker0 -j DOCKER' failed:


Should I worry about that?

Return to “CentOS 7 - Software Support”

Who is online

Users browsing this forum: No registered users and 6 guests