在CentOS7系统中遇到firewalld无法启动的问题，日志显示关于IPv6的ICMP类型不被内核支持的警告，并且ip6tables和iptables-restore命令执行失败。可能的原因包括：内核不支持某些IPv6 ICMP类型或ebtables扩展。解决方法可能涉及更新内核、重新编译或启用缺失的扩展。需要对Linux内核配置和网络防火墙规则有深入理解。
centos7中firewalld启动失败
我不知道是不是哪里设置错了，导致使用命令
sudo systemctl start firewalld
无法启动
查看/var/log/firewalld日志显示如下
2018-04-03 14:36:13 WARNING: ICMP type 'beyond-scope' is not supported by the kernel for ipv6.
2018-04-03 14:36:13 WARNING: beyond-scope: INVALID_ICMPTYPE: No supported ICMP type., ignoring for run-time.
2018-04-03 14:36:13 WARNING: ICMP type 'failed-policy' is not supported by the kernel for ipv6.
2018-04-03 14:36:13 WARNING: failed-policy: INVALID_ICMPTYPE: No supported ICMP type., ignoring for run-time.
2018-04-03 14:36:13 WARNING: ICMP type 'reject-route' is not supported by the kernel for ipv6.
2018-04-03 14:36:13 WARNING: reject-route: INVALID_ICMPTYPE: No supported ICMP type., ignoring for run-time.
2018-04-03 14:36:13 WARNING: '/usr/sbin/ip6tables-restore --wait=2 -n' failed: ip6tables-restore: line 34 failed
2018-04-03 14:36:13 WARNING: '/usr/sbin/iptables-restore --wait=2 -n' failed: iptables-restore: line 34 failed
2018-04-03 14:36:13 WARNING: '/usr/sbin/ebtables-restore --noflush' failed: Unable to update the kernel. Two possible causes:
1. Multiple ebtables programs were executing simultaneously. The ebtables
userspace tool doesn't by default support multiple ebtables programs running
concurrently. The ebtables option --concurrent or a tool like flock can be
used to support concurrent scripts that update the ebtables kernel tables.
2. The kernel doesn't support a certain ebtables extension, consider
recompiling your kernel or insmod the extension.
.
2018-04-03 14:36:13 ERROR: COMMAND_FAILED
我该怎么设置，希望linux运维大佬帮忙！谢谢~
2524
被折叠的 条评论
为什么被折叠?
到【灌水乐园】发言
