Welcome, Guest. Please login or register.
Did you miss your activation email?

Author Topic: [EN] Firewalld  (Read 2968 times)

Offline ruckus1

  • User
  • Posts: 8
[EN] Firewalld
« on: 2023/02/27, 22:32:54 »
Hello Folks, 20 year Linux user, and I can't for the life of me get firewalld to work:
Code: [Select]
sudo systemctl status firewalld
Code: [Select]
[sudo] password for me:
Code: [Select]
○ firewalld.service - firewalld - dynamic firewall daemon
Code: [Select]
     Loaded: loaded (/lib/systemd/system/firewalld.service; enabled; preset: en>
Code: [Select]
     Active: inactive (dead) since Mon 2023-02-27 14:14:23 MST; 1min 43s ago
Code: [Select]
   Duration: 327ms
Code: [Select]
       Docs: man:firewalld(1)
Code: [Select]
    Process: 66527 ExecStart=/usr/sbin/firewalld --nofork --nopid (code=exited,>
Code: [Select]
   Main PID: 66527 (code=exited, status=0/SUCCESS)
Code: [Select]
        CPU: 326ms
Code: [Select]
Feb 27 14:14:23 me-82b5 systemd[1]: Started firewalld.service - firewalld - dyn>
Code: [Select]
Feb 27 14:14:23 me-82b5 firewalld[66527]: ERROR: 'python-nftables' failed: inte>
Code: [Select]
                                         
Code: [Select]
                                         
Code: [Select]
                                          JSON blob:
Code: [Select]
                                          {"nftables": [{"metainfo": {"json_sch>
Code: [Select]
Feb 27 14:14:23 me-82b5 firewalld[66527]: ERROR: Failed to load user configurat>
Code: [Select]
Feb 27 14:14:23 me-82b5 firewalld[66527]: ERROR: 'python-nftables' failed: inte>
Code: [Select]
                                         
Code: [Select]
                                         
Code: [Select]
                                          JSON blob:
Code: [Select]
                                          {"nftables": [{"metainfo": {"json_sch>
Code: [Select]
Feb 27 14:14:23 me-82b5 firewalld[66527]: ERROR: COMMAND_FAILED: 'python-nftabl>
Code: [Select]
                                          I've spent a good number of hours trying to make it run, but no joy....

Current settings:
Code: [Select]
systemctl status ufw firewalld
Code: [Select]
○ ufw.service - Uncomplicated firewall
Code: [Select]
     Loaded: loaded (/lib/systemd/system/ufw.service; enabled; preset: enabled)
Code: [Select]
     Active: inactive (dead) since Mon 2023-02-27 14:31:10 MST; 5s ago
Code: [Select]
   Duration: 35min 3.003s
Code: [Select]
       Docs: man:ufw(8)
Code: [Select]
    Process: 111566 ExecStop=/lib/ufw/ufw-init stop (code=exited, status=0/SUCC>
Code: [Select]
   Main PID: 998 (code=exited, status=0/SUCCESS)
Code: [Select]
        CPU: 1ms
Code: [Select]
Warning: some journal files were not opened due to insufficient permissions.
Code: [Select]
○ firewalld.service - firewalld - dynamic firewall daemon
Code: [Select]
     Loaded: loaded (/lib/systemd/system/firewalld.service; enabled; preset: en>
Code: [Select]
     Active: inactive (dead) since Mon 2023-02-27 14:14:23 MST; 16min ago
Code: [Select]
   Duration: 327ms
Code: [Select]
       Docs: man:firewalld(1)
Code: [Select]
   Main PID: 66527 (code=exited, status=0/SUCCESS)
Code: [Select]
        CPU: 326ms
Code: [Select]
lines 1-18/18 (END)



Offline eriefisher

  • User
  • Posts: 264
Re: Firewalld
« Reply #1 on: 2023/02/27, 23:59:13 »
Your running both UFW and Firewalld?
Try
Code: [Select]
ufw enableIt will likely fail but might tell you why. I can't help much with firewalld. Never used it.

Offline ruckus1

  • User
  • Posts: 8
Re: Firewalld
« Reply #2 on: 2023/02/28, 16:23:49 »
UFW works ok and starts, but I want firewalld, I've just grown a custom to it over the years.
I was hoping that someone had some insight on this. This is the  the only Debian system firewalld chokes on.
Thank You eriefisher for the assist
« Last Edit: 2023/03/02, 23:47:13 by ruckus1 »

Offline Pip

  • User
  • Posts: 161
Re: Firewalld
« Reply #3 on: 2023/02/28, 16:57:30 »
It might be good to get more of the error lines, like

Code: [Select]
Feb 27 14:14:23 me-82b5 firewalld[66527]: ERROR: Failed to load user configurat>
Code: [Select]
Feb 27 14:14:23 me-82b5 firewalld[66527]: ERROR: 'python-nftables' failed: inte>
It could give a better idea what might be going wrong.

Offline towo

  • Administrator
  • User
  • *****
  • Posts: 2.920
Re: Firewalld
« Reply #4 on: 2023/02/28, 20:15:52 »
Code: [Select]
python-nftablesdoes not exist in debian unstable
Ich gehe nicht zum Karneval, ich verleihe nur manchmal mein Gesicht.

Offline eriefisher

  • User
  • Posts: 264
Re: Firewalld
« Reply #5 on: 2023/02/28, 20:29:27 »
Code: [Select]
python3-nftablesI assume?

Offline ruckus1

  • User
  • Posts: 8
Re: Firewalld
« Reply #6 on: 2023/02/28, 22:23:00 »
Code: [Select]
python-nftablesdoes not exist in debian unstable
Good to know, I'll have to find a testing solution if possible.
Code: [Select]
[code]apt depends python3-nftables
python3-nftables
  Depends: libnftables1 (= 1.0.6-2)
  Depends: python3-jsonschema
  Depends: <python3:any>
    python3
[/code]
Code: [Select]
apt depends python-nftables

E: No packages found
« Last Edit: 2023/02/28, 22:27:23 by ruckus1 »

Offline ruckus1

  • User
  • Posts: 8
Re: Firewalld
« Reply #7 on: 2023/02/28, 22:33:07 »
It might be good to get more of the error lines, like

Code: [Select]
Feb 27 14:14:23 me-82b5 firewalld[66527]: ERROR: Failed to load user configurat>
Code: [Select]
Feb 27 14:14:23 me-82b5 firewalld[66527]: ERROR: 'python-nftables' failed: inte>
It could give a better idea what might be going wrong.
I've saved enough hopefully to help  in a .txt
Thanks guys!

Offline ruckus1

  • User
  • Posts: 8
Re: Firewalld
« Reply #8 on: 2023/03/01, 15:53:10 »
I also found shorewall is a no go, This is the strangest problem I've faced on Debian system....
What is the default firewall on Siduction? "I assume its iptables"

Offline ruckus1

  • User
  • Posts: 8
Re: Firewalld
« Reply #9 on: 2023/03/02, 15:44:17 »
If I switch to a testing model:

Code: [Select]
systemctl status firewalld
● firewalld.service - firewalld - dynamic firewall daemon
     Loaded: loaded (/lib/systemd/system/firewalld.service; enabled; preset: en>
     Active: active (running) since Thu 2023-03-02 06:41:10 MST; 46min ago
       Docs: man:firewalld(1)
   Main PID: 1038 (firewalld)
      Tasks: 2 (limit: 9254)
     Memory: 35.5M
        CPU: 412ms
     CGroup: /system.slice/firewalld.service
             └─1038 /usr/bin/python3 /usr/sbin/firewalld --nofork --nopid

and
Code: [Select]
apt policy firewalld
firewalld:
  Installed: 1.3.0-1
  Candidate: 1.3.0-1
  Version table:
 *** 1.3.0-1 990
        990 http://deb.debian.org/debian testing/main amd64 Packages
        500 https://deb.kaisenlinux.org kaisen-rolling/main amd64 Packages
        100 /var/lib/dpkg/status
     1.3.0-1~bpo11+1 100
        100 http://deb.debian.org/debian bullseye-backports/main amd64 Packages

deps
Code: [Select]
apt depends firewalld
firewalld
  Depends: dbus
  Depends: gir1.2-glib-2.0
  Depends: gir1.2-nm-1.0
 |Depends: polkitd
  Depends: policykit-1
  Depends: python3-dbus
  Depends: python3-gi
  Depends: python3-nftables (>= 0.9.3-2~)
  Depends: python3-firewall (= 1.3.0-1)
  Depends: <python3:any>
    python3
  Recommends: ipset
  Recommends: iptables
  Recommends: python3-cap-ng

I'll take it as firewalls are not so important here.
It's a pitty, I had such motivation for this OS's
Thanks for the efforts though.

Offline Pip

  • User
  • Posts: 161
Re: Firewalld
« Reply #10 on: 2023/03/02, 23:19:52 »
Perhaps this would be relevant for you?

https://wiki.debian.org/nftables

Offline ruckus1

  • User
  • Posts: 8
Re: Firewalld
« Reply #11 on: 2023/03/02, 23:46:16 »
Perhaps this would be relevant for you?

https://wiki.debian.org/nftables
Thanks Pip, I should have mentioned I spent a day or two on that link before posting here.
I'm going to do something that will make everyone cringe, as a last effort.
I'll report any relevant findings.

Offline ruckus1

  • User
  • Posts: 8
Re: Firewalld
« Reply #12 on: 2023/03/03, 15:46:04 »
This has to do with this Distro IE:
Code: [Select]
systemctl status firewalld
● firewalld.service - firewalld - dynamic firewall daemon
     Loaded: loaded (/lib/systemd/system/firewalld.service; enabled; preset: en>
     Active: active (running) since Fri 2023-03-03 07:40:23 MST; 44s ago
       Docs: man:firewalld(1)
   Main PID: 62899 (firewalld)
      Tasks: 2 (limit: 9330)
     Memory: 25.6M
        CPU: 260ms
     CGroup: /system.slice/firewalld.service
             └─62899 /usr/bin/python3 /usr/sbin/firewalld --nofork --nopid

Mar 03 07:40:22 debian-unstable systemd[1]: Starting firewalld.service - firewa>
Mar 03 07:40:23 debian-unstable systemd[1]: Started firewalld.service - firewal>