ipset not usable

Support for security such as Firewalls and securing linux
Post Reply
yodasoda
Posts: 1
Joined: 2017/03/15 09:30:52

ipset not usable

Post by yodasoda » 2017/03/15 09:42:31

Hi CentOs cummunity ....first post.

I've been using centos for a few months now and been setting up a webserver learning as I go along (thanks a lot to this community)
I've hit a snag...

I am running centos 7 with php, nginx and mariandb.
When running :

$ sudo systemctl status firewalld -l

I get the following results
● firewalld.service - firewalld - dynamic firewall daemon
Loaded: loaded (/usr/lib/systemd/system/firewalld.service; enabled; vendor preset: enabled)
Active: active (running) since Tue 2017-03-14 16:14:09 SAST; 19h ago
Docs: man:firewalld(1)
Main PID: 1270 (firewalld)
CGroup: /system.slice/firewalld.service
└─1270 /usr/bin/python -Es /usr/sbin/firewalld --nofork --nopid

Mar 14 16:14:09 ip systemd[1]: Starting firewalld - dynamic firewall daemon...
Mar 14 16:14:09 ip systemd[1]: Started firewalld - dynamic firewall daemon.
Mar 14 16:14:09 ip firewalld[1270]: WARNING: ipset not usable, disabling ipset usage in firewall.
Mar 14 16:14:09 ip firewalld[1270]: WARNING: ebtables not usable, disabling ethernet bridge firewall.
Mar 14 16:14:09 ip firewalld[1270]: ERROR: COMMAND_FAILED

why am I getting these warnings and how would I go about fixing these issues.

Note I have tried reinstalling firewalld without fixing the issues.

Thanks in advance. :D

User avatar
TrevorH
Site Admin
Posts: 33219
Joined: 2009/09/24 10:40:56
Location: Brighton, UK

Re: ipset not usable

Post by TrevorH » 2017/03/15 10:26:55

Do you have any ipset packages installed? rpm -qa ipset\*

You'll definitely want ipset and ipset-libs but ipset-service probably isn't required if you are running firewalld.
The future appears to be RHEL or Debian. I think I'm going Debian.
Info for USB installs on http://wiki.centos.org/HowTos/InstallFromUSBkey
CentOS 5 and 6 are deadest, do not use them.
Use the FAQ Luke

Post Reply