-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 On Wed, Nov 30, 2016 at 09:19:06PM +0300, Eva Star wrote: > On 11/27/2016 02:04 AM, Marek Marczykowski-Górecki wrote: > > > Do you see some correlation with: > > - starting/stopping another VM? > > - affected VMs have or not firewall rules? > > > > Also, check if restarting qubes-firewall service in sys-firewall helps > > (and check it status first). > > > > Seems I have the same issue! (Maybe) I think it's correlate with CHECKING > UPDATES on dom0 or templates. When Qubes do that check - other VM still not > responsive. I wrote about this at the Xen 4.6.3 thread.
More troubleshooting steps: 1. When problem appears, try in sys-firewall: qubesdb-read /qubes-iptables-error This should print last error of firewall reload. I guess it may be about some DNS resolution failure (if any rule use DNS name instead of IP). This shouldn't affect all the VMs - only the one for which name resolution failed, but maybe something is wrong here. 2. Check status and logs of qubes-firewall service: sudo systemctl status qubes-firewall Should be "active (running)" and a series of "qubes-firewall[xxx]: /qubes-iptables" messages. If you see anything else, let me know. 3. Restart qubes-firewall service and see whether it helps: sudo systemctl restart qubes-firewall - -- Best Regards, Marek Marczykowski-Górecki Invisible Things Lab A: Because it messes up the order in which people normally read text. Q: Why is top-posting such a bad thing? -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQEcBAEBCAAGBQJYRCXvAAoJENuP0xzK19cshjgH/iMyhpSkETZP6FyNKTuhlQaZ T04mPxIpGtkVYnDythtCkhqmJXg+mrtJPOF8SUuVTh4cMC6SyFfkTdkjCjj+yBPo elMvBV6OX5H261Jds2tmmBJ3OGQDWrLexp/q5aP/y6qehG/9Bc7rAo2Aj8YjeV0T i5EwAG6b+YHfKfWDPR4HWSpfaBIHHfrvPABgVmWAcg8Onj5sKFGYEe5pYFMMe8k0 zjzEuZiUNZrQwygnaZHFI26vGpc8WMnavXDXXeMzo1yndhZKs9fcyptYvvu2dNSQ kvm6akyArHpmv3bYetfx/cTKNLGClSG/XW5cQXPheHCZH0RHWtEUm0lQxeP8uhc= =PQ/6 -----END PGP SIGNATURE----- -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to firstname.lastname@example.org. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/20161204141926.GR1145%40mail-itl. For more options, visit https://groups.google.com/d/optout.