On 04/19/2017 03:55 PM, Kelley Trombly-Freytag wrote:
When I tried to add to my ipset, (firewall-cmd --permanent --ipset=groupips 
--add-entry=XXX.XXX.XX.0/24)
 I received the following error:

Error: IO_Object_XMLGenerator instance has no attribute '_out'

This subsequently made my ipset file empty, and as a result, I can not ssh into 
the machine.

Can I just recreate the ipset file under /etc/firewalld/ipsets and try to 
firewall-cmd --reload?

What is this error and how do I fix it?

I am currently running redhat release 7.2. Firewalld is at firewalld-0.4.3.2-8, 
with
no yum updates outstanding.

Kelley Trombly-Freytag


I just tried this and had no problems on 7.2:

[root@csdev17 ipsets]# cat /etc/redhat-release
Scientific Linux release 7.2 (Nitrogen)

[root@csdev17 ipsets]# rpm -qa firewalld
firewalld-0.4.3.2-8.el7.noarch

[root@csdev17 ipsets]# firewall-cmd --permanent --new-ipset=groupips --type=hash:net
success

[root@csdev17 ipsets]# firewall-cmd --permanent --ipset=groupips --add-entry=192.168.3.0/24
success

With that said, you should be able to replace the xml file by hand and reload your firewall.

-Mark

Reply via email to