【20.03-SP1】装完everything镜像，重启所有服务，journalctl -u firewalld查看会出现告警

【环境信息】
系统：arm及x86
源：everything
【问题复现步骤】
1、安装everything的所有软件包
2、重启所有服务
3、journalctl -u firewalld
【预期结果】
journalctl -u firewalld不会出现告警信息
【实际结果】
journalctl -u firewalld出现告警信息
12月 08 12:50:44 localhost firewalld[9591]: WARNING: COMMAND_FAILED: '/usr/sbin/iptables -w10 -t nat -D PREROUTING' failed: iptables: Bad rule (does a matching rule exist in that chain?).
12月 08 12:50:44 localhost firewalld[9591]: WARNING: COMMAND_FAILED: '/usr/sbin/iptables -w10 -t nat -D OUTPUT' failed: iptables: Bad rule (does a matching rule exist in that chain?).
12月 08 12:50:44 localhost firewalld[9591]: WARNING: COMMAND_FAILED: '/usr/sbin/iptables -w10 -t nat -F DOCKER' failed: iptables: No chain/target/match by that name.
12月 08 12:50:44 localhost firewalld[9591]: WARNING: COMMAND_FAILED: '/usr/sbin/iptables -w10 -t nat -X DOCKER' failed: iptables: No chain/target/match by that name.
12月 08 12:50:44 localhost firewalld[9591]: WARNING: COMMAND_FAILED: '/usr/sbin/iptables -w10 -t filter -F DOCKER' failed: iptables: No chain/target/match by that name.
12月 08 12:50:44 localhost firewalld[9591]: WARNING: COMMAND_FAILED: '/usr/sbin/iptables -w10 -t filter -X DOCKER' failed: iptables: No chain/target/match by that name.
12月 08 12:50:44 localhost firewalld[9591]: WARNING: COMMAND_FAILED: '/usr/sbin/iptables -w10 -t filter -F DOCKER-ISOLATION-STAGE-1' failed: iptables: No chain/target/match by that name.
12月 08 12:50:44 localhost firewalld[9591]: WARNING: COMMAND_FAILED: '/usr/sbin/iptables -w10 -t filter -X DOCKER-ISOLATION-STAGE-1' failed: iptables: No chain/target/match by that name.
12月 08 12:50:44 localhost firewalld[9591]: WARNING: COMMAND_FAILED: '/usr/sbin/iptables -w10 -t filter -F DOCKER-ISOLATION-STAGE-2' failed: iptables: No chain/target/match by that name.
12月 08 12:50:44 localhost firewalld[9591]: WARNING: COMMAND_FAILED: '/usr/sbin/iptables -w10 -t filter -X DOCKER-ISOLATION-STAGE-2' failed: iptables: No chain/target/match by that name.
12月 08 12:50:44 localhost firewalld[9591]: WARNING: COMMAND_FAILED: '/usr/sbin/iptables -w10 -t filter -F DOCKER-ISOLATION' failed: iptables: No chain/target/match by that name.
12月 08 12:50:44 localhost firewalld[9591]: WARNING: COMMAND_FAILED: '/usr/sbin/iptables -w10 -t filter -X DOCKER-ISOLATION' failed: iptables: No chain/target/match by that name.
12月 08 12:50:46 localhost firewalld[9591]: WARNING: COMMAND_FAILED: '/usr/sbin/iptables -w10 -D FORWARD -i docker0 -o docker0 -j DROP' failed: iptables: Bad rule (does a matching rule exist in that chain?).

![输入图片说明](https://images.gitee.com/uploads/images/2020/1211/171423_a4aa6544_5453332.png "屏幕截图.png")

src-openEuler/firewalld

内容风险标识

评论 (4)

src-openEuler/firewalld .gitee-modal { width: 500px !important; }

内容风险标识