On Wed, Aug 19, 2015 at 5:54 AM, Andrew Holway <andrew.holway at
gmail.com> wrote:> Hi,
>
> I have a standard Centos7 AMI. Can anyone tell me whats happening here?
>
> Thanks,
>
> Andrew
> Aug 19 11:17:23 master dhclient[22897]: bound to 10.141.10.49 -- renewal in
> 1795 seconds.
> Aug 19 11:17:24 master network: Determining IP information for eth0...
done.
> Aug 19 11:17:24 master network: [ OK ]
> Aug 19 11:17:24 master systemd: Started LSB: Bring up/down networking.
> Aug 19 11:23:43 master firewalld: 2015-08-19 11:23:43 ERROR: Failed to
> apply rules. A firewall reload might solve the issue if the firewall has
> been modified using ip*tables or ebtables.
> Aug 19 11:23:43 master firewalld: 2015-08-19 11:23:43 ERROR:
> '/sbin/iptables -D INPUT_ZONES -t filter -i eth0 -g IN_public'
failed:
> iptables: No chain/target/match by that name.
> Aug 19 11:23:43 master firewalld: 2015-08-19 11:23:43 ERROR:
> COMMAND_FAILED: '/sbin/iptables -D INPUT_ZONES -t filter -i eth0 -g
> IN_public' failed: iptables: No chain/target/match by that name.
> Aug 19 11:35:58 master yum[23685]: Erased:
> cloud-init-0.7.5-10.el7.centos.1.x86_64
Firewalld and iptables are mutually exclusive, at least on Fedora.
There might be some use case for combining static and dynamic rules
(?) but I'd expect you should disable one or the other.
--
Chris Murphy