Differences

This shows you the differences between two versions of the page.

--- wiki:shorewall_troubleshooting [2022/07/01 14:07] – add iptables-restore: line <some number> failed antisa
+++ wiki:shorewall_troubleshooting [2026/06/19 11:48] (current) – [iptables-restore: line <some number> failed/Chain '~comb2' does not exist] add flush warning and what to do antisa
@@ Line 34: / Line 34: @@
-===== iptables-restore: line <some number> failed =====
+===== iptables-restore: line <some number> failed/Chain '~comb2' does not exist =====
-You can get this error on reload or restart. Try deleting the .start, .restart or .reload files in ///var/lib/shorewall///. They will get regenerated on next ''shorewall start'' or ''shorewall restart''
+You can get this error on reload or restart. Try deleting the .start, .restart or .reload files in ///var/lib/shorewall/// etc:
+  rm -f .iptables-restore-* .re* .start
+They will get regenerated on next ''shorewall start'' or ''shorewall restart''
+If it still doesn't work you'll need to grep for the chain in iptables
+  # iptables -nvL |grep comb2
+     0 ~comb2     0    --  br-+   *       0.0.0.0/0            0.0.0.0/0
+     0 ~comb2     0    --  docker0 *       0.0.0.0/0            0.0.0.0/0
+then try removing only those lines.
+<WRAP center round important 60%>
+Don't run
+  iptables -F
+as that might lock you out of the system completely if there are ssh rules set.
+</WRAP>
+===== Changes from rules.d directory are not reflected upon reload/restart =====
+If you are adding rules to ///etc/shorewall/rules// file via [[https://shorewall.org/configuration_file_basics.htm#Embedded|embedded shell command]] i.e.
+  ?SECTION NEW
+  SHELL cat /etc/shorewall/rules.d/*.rules 2> /dev/null || true
+and the changes are not applied make sure that ''AUTOMAKE=No'' in ///etc/shorewall/shorewall.conf//. Check the [[https://manpages.debian.org/unstable/shorewall/shorewall.conf.5.en.html|man page]] for other possible values.
 ==== Tested on ====
   * Debian 11.3
@@ Line 43: / Line 69: @@
 ====== See also ======
+  * [[drop_lots_ip_subnets_shorewall|Drop lots of IP subnets in shorewall]]
+  * [[shorewall_rate_limiting_requests|shorewall rate limiting requests]]
 ====== References ======