search

gravitl / netmaker

Netmaker makes networks with WireGuard. Netmaker automates fast, secure, and distributed virtual networks.
https://netmaker.io
Other
9.5k stars 552 forks source link

[Bug]: iptables from docker #917

Closed ahmaddxb closed 2 years ago

ahmaddxb commented 2 years ago

Contact Details

No response

What happened?

I have setup Egress and iptables from docker client do not reflect on the host. Therefore i can not ping the clients internal network. If i manually enter the iptables rules on the host it works correctly.

Version

v0.12.0

What OS are you using?

Linux

Relevant log output

No response

Contributing guidelines

ahmaddxb commented 2 years ago

the rule are there but in iptables-legacy and it seems they are ignored. Is there a way to make the rules write to the iptables rather than iptables-legacy

ahmaddxb commented 2 years ago

These command set fixed my issue

update-alternatives --set iptables /usr/sbin/iptables-legacy
update-alternatives --set ip6tables /usr/sbin/ip6tables-legacy
update-alternatives --display iptables

iptables - manual mode link best version is /usr/sbin/iptables-nft link currently points to /usr/sbin/iptables-nft link iptables is /usr/sbin/iptables slave iptables-restore is /usr/sbin/iptables-restore slave iptables-save is /usr/sbin/iptables-save /usr/sbin/iptables-legacy - priority 10 slave iptables-restore: /usr/sbin/iptables-legacy-restore slave iptables-save: /usr/sbin/iptables-legacy-save /usr/sbin/iptables-nft - priority 20 slave iptables-restore: /usr/sbin/iptables-nft-restore slave iptables-save: /usr/sbin/iptables-nft-save root@omv:/srv/dev-disk-by-label-NAS/appdata/Ahmad#

afeiszli commented 2 years ago

@ahmaddxb it sounds like the issue here is the version of iptables on the host machine, and that the issue is fixed?

If so, please close this issue. We can add this as a reference in the docs if others have the same issue: https://github.com/gravitl/netmaker-docs