Host to world (OUTPUT) DNAT firewalld rule does not work and causes an error
Issue
- The following rule results in a "firewall-cmd --reload" error:
# firewall-cmd --permanent --new-policy Policy1
# firewall-cmd --permanent --policy=Policy1 --add-ingress-zone=HOST
# firewall-cmd --permanent --policy=Policy1 --add-egress-zone=ANY
# firewall-cmd --permanent --policy=Policy1 --add-rich-rule='rule family="ipv4" destination address="233.252.0.1" forward-port port="9001" protocol="tcp" to-port="9001" to-addr="198.51.100.1"'
# firewall-cmd --reload
Error: COMMAND_FAILED: 'python-nftables' failed: internal:0:0-0: Error: Could not process rule: No such file or directory
internal:0:0-0: Error: Could not process rule: No such file or directory
internal:0:0-0: Error: Could not process rule: No such file or directory
internal:0:0-0: Error: Could not process rule: No such file or directory
internal:0:0-0: Error: Could not process rule: No such file or directory
internal:0:0-0: Error: Could not process rule: No such file or directory
internal:0:0-0: Error: Could not process rule: No such file or directory
internal:0:0-0: Error: Could not process rule: No such file or directory
Environment
- Red Hat Enterprise Linux 8
- firewalld-0.9.3-13.el8.noarch
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.