Error with firewalld in raspberry pi4

[m_umair69]

I have installed firewalld in my raspberry pi 4 , the installed versions for iptables and firewalld as per my synaptic installer are

iptables 1.8.2-4
firewalld 0.6.3-5

When i try to reload firewalld or restart firewalld service i am getting error

Code: Select all

ERROR: '/usr/sbin/iptables-restore -w -n' failed: iptables-restore v1.8.2 (nf_tables): 
                                              line 4: RULE_REPLACE failed (No such file or directory): rule in chain INPUT
                                              line 4: RULE_REPLACE failed (No such file or directory): rule in chain OUTPUT
ERROR: '/usr/sbin/ip6tables-restore -w -n' failed: ip6tables-restore v1.8.2 (nf_tables): 
                                              line 4: RULE_REPLACE failed (No such file or directory): rule in chain INPUT
                                              line 4: RULE_REPLACE failed (No such file or directory): rule in chain OUTPUT
ERROR: COMMAND_FAILED: '/usr/sbin/ip6tables-restore -w -n' failed: ip6tables-restore v1.8.2 (nf_tables
                                              line 4: RULE_REPLACE failed (No such file or directory): rule in chain INPUT
                                              line 4: RULE_REPLACE failed (No such file or directory): rule in chain OUTPUT

Upon investigation on google i found out that iptables v1.8.2 has been known for this issue , but i cant seem to find a way to upgrade iptables and firewalld to new versions on my raspberry. Is there a way to manually or automatically update these packages

[Higo]

Any News ?

[gbnichol]

I was experiencing the same issue running "Raspbian GNU/Linux 10 (buster)" on a Pi 4.

I followed the procedure from http://marksrpicluster.blogspot.com/201 ... ry-pi.html to upgrade iptables from the Debian 10 Buster backports. This resolved the problem.

Code: Select all

root> cp -p /etc/apt/sources.list /etc/apt/sources.list-$(date +%s)

root> cat << EOF >> /etc/apt/sources.list
deb http://deb.debian.org/debian buster-backports main
EOF

root> gpg --keyserver hkp://keyserver.ubuntu.com:80 --recv-keys 648ACFD622F3D138
gpg: key DC30D7C23CBBABEE: public key "Debian Archive Automatic Signing Key (10/buster) <[email protected]>" imported
gpg: Total number processed: 1
gpg:               imported: 1

root> gpg --export 648ACFD622F3D138 | apt-key add -
OK

root> apt update

root> apt list iptables -a
Listing... Done
iptables/buster-backports 1.8.5-3~bpo10+1 armhf
iptables/stable,now 1.8.2-4 armhf [installed]

root> apt -y install -t buster-backports iptables

root> reboot

[Higo]

Works for me,

Thanks.