search

arno-iptables-firewall / aif

GNU General Public License v2.0
149 stars 24 forks source link

Ubuntu 22.04 with libvirtd, the bridge interface 'virbr0' does not start automatically #86

Open iiipod opened 1 year ago

iiipod commented 1 year ago

There is no problem with using firewalld. Using Arno I get the following error: internal error: Failed to apply firewall rules /usr/sbin/iptables -w --table filter --insert LIBVIRT_OUT --out-interface virbr0 --protocol tcp --destination-port 53 --jump ACCEPT: iptables: No chain/target/match by that name. If I restart the libvirtd service and then manually start the interface 'virbr0', no error is reported Please take a look and fix it.

network.xml `

network 79cad3ea-bbe7-478b-9024-7a1ab6b2f237

`

arnova commented 1 year ago

We really need more info than this: your aif config file, the output when executing aif. Please read the README on how to provide sufficient info.

iiipod commented 1 year ago

Thanks for the reply and please help check it out. If you start aif first, then libvirt will get an error. If you start libvirtd and then virsh, there will be no error after aif.

firewall.conf.txt custom-rules.txt libvirtd.log aif-start.txt

It looks like modifying arno-iptables-firewall.service will temporarily fix the problem. edit as After=local-fs.target network-online.target libvirtd.service

arnova commented 1 year ago

As you already discovered: the problem is the order the services are loaded. I need to think about this.... @abelbeck : Ideas?