same trouble here iptables backend, doesn't even start nftables backend, starts but doesn't do anything, though installing nftables package gets firewall-cms --state to work, it says running
some bits of debug console output diehard@silverbox:~$ sudo firewalld --nofork --debug 10 2019-04-24 03:33:45 DEBUG2: <class 'firewall.core.ipXtables.ip4tables'>: /usr/sbin/iptables-restore will be using option. 2019-04-24 03:33:45 DEBUG2: <class 'firewall.core.ipXtables.ip6tables'>: /usr/sbin/ip6tables-restore will be using option. 2019-04-24 03:33:45 DEBUG2: <class 'firewall.core.ebtables.ebtables'>: /usr/sbin/ebtables-restore /run/firewalld/temp.n5prl97e: 0 2019-04-24 03:33:45 DEBUG1: start() 2019-04-24 03:33:45 DEBUG1: Loading firewalld config file '/etc/firewalld/firewalld.conf' 2019-04-24 03:33:45 DEBUG1: CleanupOnExit is set to 'True' 2019-04-24 03:33:45 DEBUG1: IPv6 rpfilter is enabled 2019-04-24 03:33:45 DEBUG1: LogDenied is set to 'off' 2019-04-24 03:33:45 DEBUG1: AutomaticHelpers is set to 'system' 2019-04-24 03:33:45 DEBUG1: FirewallBackend is set to 'iptables' 2019-04-24 03:33:45 DEBUG2: <class 'firewall.core.ipset.ipset'>: /sbin/ipset list 2019-04-24 03:33:45 DEBUG2: <class 'firewall.core.ipset.ipset'>: /sbin/ipset --help 2019-04-24 03:33:45 WARNING: iptables-restore and iptables are missing, disabling IPv4 firewall. 2019-04-24 03:33:45 WARNING: ip6tables-restore and ip6tables are missing, disabling IPv6 firewall. 2019-04-24 03:33:45 DEBUG1: Conntrack helpers supported by the kernel: 2019-04-24 03:33:45 DEBUG1: nf_conntrack_amanda: amanda 2019-04-24 03:33:45 DEBUG1: nf_conntrack_ftp: ftp 2019-04-24 03:33:45 DEBUG1: nf_conntrack_h323: H.245, Q.931, RAS 2019-04-24 03:33:45 DEBUG1: nf_conntrack_irc: irc 2019-04-24 03:33:45 DEBUG1: nf_conntrack_netbios_ns: netbios-ns 2019-04-24 03:33:45 DEBUG1: nf_conntrack_pptp: pptp 2019-04-24 03:33:45 DEBUG1: nf_conntrack_proto_gre: proto-gre 2019-04-24 03:33:45 DEBUG1: nf_conntrack_sane: sane 2019-04-24 03:33:45 DEBUG1: nf_conntrack_sip: sip 2019-04-24 03:33:45 DEBUG1: nf_conntrack_snmp: snmp 2019-04-24 03:33:45 DEBUG1: nf_conntrack_tftp: tftp 2019-04-24 03:33:45 DEBUG1: NAT helpers supported by the kernel: 2019-04-24 03:33:45 DEBUG1: nf_nat_amanda: amanda 2019-04-24 03:33:45 DEBUG1: nf_nat_ftp: ftp 2019-04-24 03:33:45 DEBUG1: nf_nat_irc: irc 2019-04-24 03:33:45 DEBUG1: nf_nat_sip: sip 2019-04-24 03:33:45 DEBUG1: nf_nat_tftp: tftp 2019-04-24 03:33:45 DEBUG1: nf_nat_h323: h323 2019-04-24 03:33:45 DEBUG1: nf_nat_pptp: pptp sniped a bunch of loading stuff that doesn't seem relevant 2019-04-24 03:33:45 DEBUG1: Using default zone 'public' 2019-04-24 03:33:45 DEBUG2: <class 'firewall.core.modules.modules'>: /sbin/modprobe nf_conntrack 2019-04-24 03:33:45 DEBUG2: <class 'firewall.core.ebtables.ebtables'>: /usr/sbin/ebtables --concurrent -t nat -L 2019-04-24 03:33:45 DEBUG2: <class 'firewall.core.ebtables.ebtables'>: /usr/sbin/ebtables --concurrent -t filter -L 2019-04-24 03:33:45 FATAL ERROR: No IPv4 and IPv6 firewall. 2019-04-24 03:33:45 ERROR: Raising SystemExit in run_server I can run iptables command myself so not sure why firewalld can't. hope this mess helps. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1826187 Title: firewalld fails to start: FATAL ERROR: No IPv4 and IPv6 firewall. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/firewalld/+bug/1826187/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
