Community Packages

Please read this before reporting a bug:
https://wiki.archlinux.org/title/Bug_reporting_guidelines

Do NOT report bugs when a package is just outdated, or it is in the AUR. Use the 'flag out of date' link on the package page, or the Mailing List.

REPEAT: Do NOT report bugs for outdated packages!
Tasklist

FS#32438 - [ufw 0.33-1] fails to run

Attached to Project: Community Packages
Opened by Martín Cigorraga (msx) - Sunday, 04 November 2012, 02:59 GMT
Last edited by Bartłomiej Piotrowski (Barthalion) - Sunday, 04 November 2012, 13:38 GMT
Task Type Bug Report
Category Packages
Status Closed
Assigned To No-one
Architecture All
Severity Critical
Priority Normal
Reported Version
Due in Version Undecided
Due Date Undecided
Percent Complete 100%
Votes 0
Private No

Details

Description:

ufw 0.33-1 fails to run.

Additional info:
* package version(s)
0.33-1

* config and/or log files etc.


Steps to reproduce:
~ # systemctl enable ufw.service && systemctl start ufw.service
~ # systemctl status ufw.service
ufw.service - CLI Netfilter Manager
Loaded: loaded (/usr/lib/systemd/system/ufw.service; enabled)
Active: active (exited) since Sat, 2012-11-03 23:40:34 ART; 14min ago
Main PID: 851 (code=exited, status=0/SUCCESS)
CGroup: name=systemd:/system/ufw.service

Nov 03 23:40:35 heybeavis ufw-init[851]: Skip starting firewall: ufw (not enabled)
Nov 03 23:53:28 heybeavis systemd[1]: Started CLI Netfilter Manager.

~ # ufw enable
Traceback (most recent call last):
File "/usr/bin/ufw", line 95, in <module>
ui = ufw.frontend.UFWFrontend(pr.dryrun)
File "/usr/lib/python2.7/site-packages/ufw/frontend.py", line 153, in __init__
self.backend = UFWBackendIptables(dryrun)
File "/usr/lib/python2.7/site-packages/ufw/backend_iptables.py", line 45, in __init__
ufw.backend.UFWBackend.__init__(self, "iptables", dryrun, files)
File "/usr/lib/python2.7/site-packages/ufw/backend.py", line 88, in __init__
nf_caps = ufw.util.get_netfilter_capabilities(self.ip6tables)
File "/usr/lib/python2.7/site-packages/ufw/util.py", line 734, in get_netfilter_capabilities
raise OSError(errno.ENOENT, out)
OSError: [Errno 2] ip6tables v1.4.16.2: can't initialize ip6tables table `filter': Address family not supported by protocol
Perhaps ip6tables or your kernel needs to be upgraded.

~ # ufw status
Traceback (most recent call last):
File "/usr/bin/ufw", line 95, in <module>
ui = ufw.frontend.UFWFrontend(pr.dryrun)
File "/usr/lib/python2.7/site-packages/ufw/frontend.py", line 153, in __init__
self.backend = UFWBackendIptables(dryrun)
File "/usr/lib/python2.7/site-packages/ufw/backend_iptables.py", line 45, in __init__
ufw.backend.UFWBackend.__init__(self, "iptables", dryrun, files)
File "/usr/lib/python2.7/site-packages/ufw/backend.py", line 88, in __init__
nf_caps = ufw.util.get_netfilter_capabilities(self.ip6tables)
File "/usr/lib/python2.7/site-packages/ufw/util.py", line 734, in get_netfilter_capabilities
raise OSError(errno.ENOENT, out)
OSError: [Errno 2] ip6tables v1.4.16.2: can't initialize ip6tables table `filter': Address family not supported by protocol
Perhaps ip6tables or your kernel needs to be upgraded.
This task depends upon

Closed by  Bartłomiej Piotrowski (Barthalion)
Sunday, 04 November 2012, 13:38 GMT
Reason for closing:  Not a bug
Comment by Martín Cigorraga (msx) - Sunday, 04 November 2012, 03:02 GMT
Sorry for the noise, I found this is directly related to the iptables.service unit problem:

~ $ su root
/home/msx # systemctl enable iptables.service
ln -s '/usr/lib/systemd/system/iptables.service' '/etc/systemd/system/multi-user.target.wants/iptables.service'
/home/msx # systemctl start iptables.service
Job for iptables.service failed. See 'systemctl status iptables.service' and 'journalctl -n' for details.
/home/msx # systemctl status iptables.service
iptables.service - Packet Filtering Framework
Loaded: loaded (/usr/lib/systemd/system/iptables.service; enabled)
Active: failed (Result: exit-code) since Sun, 2012-11-04 00:00:01 ART; 11s ago
Process: 5442 ExecStart=/usr/sbin/iptables-restore /etc/iptables/iptables.rules (code=exited, status=1/FAILURE)
CGroup: name=systemd:/system/iptables.service

Nov 04 00:00:01 heybeavis systemd[1]: Starting Packet Filtering Framework...
Nov 04 00:00:01 heybeavis iptables-restore[5442]: Can't open /etc/iptables/iptables.rules: No such file or directory
Nov 04 00:00:01 heybeavis systemd[1]: iptables.service: main process exited, code=exited, status=1/FAILURE
Nov 04 00:00:01 heybeavis systemd[1]: Failed to start Packet Filtering Framework.
Nov 04 00:00:01 heybeavis systemd[1]: Unit iptables.service entered failed state

I'm requesting closure, thanks.

Loading...