【CenOS7】firewalld docker
# systemctl status firewalld.service -lfirewalld.service - firewalld - dynamic firewall daemon Loaded: loaded (/usr/lib/systemd/system/firewalld.service; enabled) Active: active (running) since 六 2015-10-31 02:25:11 CST; 28min ago Main PID: 909 (firewalld) CGroup: /system.slice/firewalld.service └─909 /usr/bin/python -Es /usr/sbin/firewalld --nofork --nopid10月 31 02:25:15 wode004 firewalld: 2015-10-31 02:25:15 ERROR: COMMAND_FAILED: '/sbin/iptables -t nat -C POSTROUTING -s 172.17.42.1/16 ! -o docker0 -j MASQUERADE' failed: iptables: No chain/target/match by that name.10月 31 02:25:15 wode004 firewalld: 2015-10-31 02:25:15 ERROR: COMMAND_FAILED: '/sbin/iptables -D FORWARD -i docker0 -o docker0 -j DROP' failed: iptables: Bad rule (does a matching rule exist in that chain?).10月 31 02:25:15 wode004 firewalld: 2015-10-31 02:25:15 ERROR: COMMAND_FAILED: '/sbin/iptables -t filter -C FORWARD -i docker0 -o docker0 -j ACCEPT' failed: iptables: Bad rule (does a matching rule exist in that chain?).10月 31 02:25:15 wode004 firewalld: 2015-10-31 02:25:15 ERROR: COMMAND_FAILED: '/sbin/iptables -t filter -C FORWARD -i docker0 ! -o docker0 -j ACCEPT' failed: iptables: Bad rule (does a matching rule exist in that chain?).10月 31 02:25:15 wode004 firewalld: 2015-10-31 02:25:15 ERROR: COMMAND_FAILED: '/sbin/iptables -t filter -C FORWARD -o docker0 -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT' failed: iptables: Bad rule (does a matching rule exist in that chain?).10月 31 02:25:15 wode004 firewalld: 2015-10-31 02:25:15 ERROR: COMMAND_FAILED: '/sbin/iptables -t nat -n -L DOCKER' failed: iptables: No chain/target/match by that name.10月 31 02:25:15 wode004 firewalld: 2015-10-31 02:25:15 ERROR: COMMAND_FAILED: '/sbin/iptables -t nat -C PREROUTING -m addrtype --dst-type LOCAL -j DOCKER' failed: iptables: No chain/target/match by that name.10月 31 02:25:15 wode004 firewalld: 2015-10-31 02:25:15 ERROR: COMMAND_FAILED: '/sbin/iptables -t nat -C OUTPUT -m addrtype --dst-type LOCAL -j DOCKER ! --dst 127.0.0.0/8' failed: iptables: No chain/target/match by that name.10月 31 02:25:15 wode004 firewalld: 2015-10-31 02:25:15 ERROR: COMMAND_FAILED: '/sbin/iptables -t filter -n -L DOCKER' failed: iptables: No chain/target/match by that name.10月 31 02:25:15 wode004 firewalld: 2015-10-31 02:25:15 ERROR: COMMAND_FAILED: '/sbin/iptables -t filter -C FORWARD -o docker0 -j DOCKER' failed: iptables: No chain/target/match by that name.#
# ps -ef | grep dockroot 1622 10 02:25 ? 00:00:00 /usr/bin/docker -d --selinux-enabledroot 608831910 02:55 pts/0 00:00:00 grep --color=auto dock#
# ifconfigdocker0: flags=4099<UP,BROADCAST,MULTICAST>mtu 1500 inet 172.17.42.1netmask 255.255.0.0broadcast 0.0.0.0 ether 56:84:7a:fe:97:99txqueuelen 0(Ethernet) RX packets 0bytes 0 (0.0 B) RX errors 0dropped 0overruns 0frame 0 TX packets 0bytes 0 (0.0 B) TX errors 0dropped 0 overruns 0carrier 0collisions 0
页:
[1]