Differences

This shows you the differences between two versions of the page.

--- wiki:shorewall_troubleshooting [2025/09/15 12:25] – [See also] add drop_lots_ip_subnets_shorewall antisa
+++ wiki:shorewall_troubleshooting [2026/06/19 11:48] (current) – [iptables-restore: line <some number> failed/Chain '~comb2' does not exist] add flush warning and what to do antisa
@@ Line 34: / Line 34: @@
-===== iptables-restore: line <some number> failed =====
+===== iptables-restore: line <some number> failed/Chain '~comb2' does not exist =====
-You can get this error on reload or restart. Try deleting the .start, .restart or .reload files in ///var/lib/shorewall///. They will get regenerated on next ''shorewall start'' or ''shorewall restart''
+You can get this error on reload or restart. Try deleting the .start, .restart or .reload files in ///var/lib/shorewall/// etc:
+  rm -f .iptables-restore-* .re* .start
+They will get regenerated on next ''shorewall start'' or ''shorewall restart''
+If it still doesn't work you'll need to grep for the chain in iptables
+  # iptables -nvL |grep comb2
+     0 ~comb2     0    --  br-+   *       0.0.0.0/0            0.0.0.0/0
+     0 ~comb2     0    --  docker0 *       0.0.0.0/0            0.0.0.0/0
+then try removing only those lines.
+<WRAP center round important 60%>
+Don't run
+  iptables -F
+as that might lock you out of the system completely if there are ssh rules set.
+</WRAP>
 ===== Changes from rules.d directory are not reflected upon reload/restart =====
@@ Line 52: / Line 70: @@
 ====== See also ======
   * [[drop_lots_ip_subnets_shorewall|Drop lots of IP subnets in shorewall]]
+  * [[shorewall_rate_limiting_requests|shorewall rate limiting requests]]
 ====== References ======