-
Notifications
You must be signed in to change notification settings - Fork 222
nftables and firewall issues on Synology/QNAP NAS #16
Description
Hello,
With latest image I get this error on a Synology NAS:
2024-03-04T10:36:29.807Z DEBUG firewall: Firewall allow managed network endpoints managed_network_endpoints=[]
2024-03-04T10:36:29.807Z INFO firewall: Firewall starting
2024-03-04T10:36:29.813Z WARN firewall::linux: Failed to set firewall rules via stdin. Retrying using temporary file exit_code=ExitStatus(unix_wait_status(256))
2024-03-04T10:36:29.824Z ERROR firewall::linux: Failed to start firewall with exit code: exit status: 1
2024-03-04T10:36:29.824Z WARN firewall: fw.apply_rules failed e=ApplyError("nft command failed with return code: 256")
2024-03-04T10:36:29.825Z WARN main_loop: warp::warp_service: Unable to update firewall on disconnect e=ApplyError("nft command failed with return code: 256")
2024-03-04T10:36:29.825Z DEBUG main_loop: warp::warp_service: Determining disconnected reason from connectivity state net_info=IPv4: [eth0; 172.18.0.15; Ethernet]; DNS servers:; 127.0.0.11:53;
power_state=None disconnect_reason=None
2024-03-04T10:36:29.825Z WARN main_loop: warp::warp_service: Disconnecting, but reason is unknown
2024-03-04T10:36:29.825Z WARN main_loop: warp::warp_service: Reconnect on settings change failed error=FirewallUpdateFailed(ApplyError("nft command failed with return code: 256"))
With previous caomingjun/warp:2023-07-18 everything is ok.
I search for error "nft command failed with return code: 256" but I can't figure out how to fix it.
Seems that with latest version now it's necessary to add this volume:
/run/dbus/system_bus_socket:/run/dbus/system_bus_socket
I tried to build my own Dockerfile based on latest Ubuntu or Debian, delete Gost proxy, but nft error is still here.
Can you help me ? Thanks.