【CenOS7】firewalld docker
# systemctl status firewalld.service -lfirewalld.service - firewalld - dynamic firewall daemon
Loaded: loaded (/usr/lib/systemd/system/firewalld.service; enabled)
Active: active (running) since 六 2015-10-31 02:25:11 CST; 28min ago
Main PID: 909 (firewalld)
CGroup: /system.slice/firewalld.service
└─909 /usr/bin/python -Es /usr/sbin/firewalld --nofork --nopid
10月 31 02:25:15 wode004 firewalld: 2015-10-31 02:25:15 ERROR: COMMAND_FAILED: '/sbin/iptables -t nat -C POSTROUTING -s 172.17.42.1/16 ! -o docker0 -j MASQUERADE' failed: iptables: No chain/target/match by that name.
10月 31 02:25:15 wode004 firewalld: 2015-10-31 02:25:15 ERROR: COMMAND_FAILED: '/sbin/iptables -D FORWARD -i docker0 -o docker0 -j DROP' failed: iptables: Bad rule (does a matching rule exist in that chain?).
10月 31 02:25:15 wode004 firewalld: 2015-10-31 02:25:15 ERROR: COMMAND_FAILED: '/sbin/iptables -t filter -C FORWARD -i docker0 -o docker0 -j ACCEPT' failed: iptables: Bad rule (does a matching rule exist in that chain?).
10月 31 02:25:15 wode004 firewalld: 2015-10-31 02:25:15 ERROR: COMMAND_FAILED: '/sbin/iptables -t filter -C FORWARD -i docker0 ! -o docker0 -j ACCEPT' failed: iptables: Bad rule (does a matching rule exist in that chain?).
10月 31 02:25:15 wode004 firewalld: 2015-10-31 02:25:15 ERROR: COMMAND_FAILED: '/sbin/iptables -t filter -C FORWARD -o docker0 -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT' failed: iptables: Bad rule (does a matching rule exist in that chain?).
10月 31 02:25:15 wode004 firewalld: 2015-10-31 02:25:15 ERROR: COMMAND_FAILED: '/sbin/iptables -t nat -n -L DOCKER' failed: iptables: No chain/target/match by that name.
10月 31 02:25:15 wode004 firewalld: 2015-10-31 02:25:15 ERROR: COMMAND_FAILED: '/sbin/iptables -t nat -C PREROUTING -m addrtype --dst-type LOCAL -j DOCKER' failed: iptables: No chain/target/match by that name.
10月 31 02:25:15 wode004 firewalld: 2015-10-31 02:25:15 ERROR: COMMAND_FAILED: '/sbin/iptables -t nat -C OUTPUT -m addrtype --dst-type LOCAL -j DOCKER ! --dst 127.0.0.0/8' failed: iptables: No chain/target/match by that name.
10月 31 02:25:15 wode004 firewalld: 2015-10-31 02:25:15 ERROR: COMMAND_FAILED: '/sbin/iptables -t filter -n -L DOCKER' failed: iptables: No chain/target/match by that name.
10月 31 02:25:15 wode004 firewalld: 2015-10-31 02:25:15 ERROR: COMMAND_FAILED: '/sbin/iptables -t filter -C FORWARD -o docker0 -j DOCKER' failed: iptables: No chain/target/match by that name.
#
# ps -ef | grep dock
root 1622 10 02:25 ? 00:00:00 /usr/bin/docker -d --selinux-enabled
root 608831910 02:55 pts/0 00:00:00 grep --color=auto dock
#
# ifconfig
docker0: flags=4099<UP,BROADCAST,MULTICAST>mtu 1500
inet 172.17.42.1netmask 255.255.0.0broadcast 0.0.0.0
ether 56:84:7a:fe:97:99txqueuelen 0(Ethernet)
RX packets 0bytes 0 (0.0 B)
RX errors 0dropped 0overruns 0frame 0
TX packets 0bytes 0 (0.0 B)
TX errors 0dropped 0 overruns 0carrier 0collisions 0
页:
[1]