Sympl-firewall script failed on IPv6 only RPi

Support
1

Problem Description

Since 4am this morning I’ve been getting a cron message to say the Firewall script has failed.

Seeing the automated update of the kernel, I’ve tried rebooting. Will see if I get an email on the next hour…

Any Error Messages

sympl-firewall: Firewall script failed.
sympl-firewall: Flushing /sbin/iptables rules and chains.
sympl-firewall: Flushing /sbin/ip6tables rules and chains.
sympl-firewall: Restoring old iptables rules and chains.
sympl-firewall: Restoring old ip6tables rules and chains.
sympl-firewall: Left firewall script in /tmp/user/0/sympl-firewall-20191011-9676-vqmudw-saved for inspection.

The end of /var/log/apt/history.log contains the following change which ties in with the timing.

Start-Date: 2019-10-11  02:43:11
Commandline: apt-get -y upgrade
Upgrade: libraspberrypi-bin:armhf (1.20190819-1, 1.20190925-2), raspberrypi-kernel:armhf (1.20190819-1, 1.20190925-2), raspberrypi-bootloader:armhf (1.20190819-1, 1.20190925-2), raspberrypi-kernel-headers:armhf (1.20190819-1, 1.20190925-2), libraspberrypi0:armhf (1.20190819-1, 1.20190925-2)
End-Date: 2019-10-11  03:07:56

Environment

  • Sympl Version [9.0/10.0]: 10.0
  • Debian Version [Buster/Stretch]: Buster 10.1
  • Hardware Type? [Dedicated/Virtual/Pi]: Mythic Beasts Hosted Pi
  • Sympl Testing Version? [Yes/No]: Yes
2

No email at 11am, so a reboot seems to be needed any time there’s a kernel update to stop the sympl-firewall script from complaining on a RPi.

3

That would make sense - I suspect the kernel stuff is handled a little differently in Raspian.

1 Like