• Introducing WebPros Cloud - a fully managed infrastructure platform purpose-built to simplify the deployment of WebPros products !  WebPros Cloud enables you to easily deliver WebPros solutions — without the complexity of managing the infrastructure.
    Join the pilot program today!
  • Support for BIND DNS has been removed from Plesk for Windows due to security and maintenance risks.
    If a Plesk for Windows server is still using BIND, the upgrade to Plesk Obsidian 18.0.70 will be unavailable until the administrator switches the DNS server to Microsoft DNS.

Firewall Activation Error

O

originalmguy

Guest
Hi there,

Just a quick question. Hopefully someone can help.
After I edit/add rules to the firewall module and try to activate it I get the following error:

----
Error: Could not activate firewall configuration:

safeact: safeact: /usr/local/psa/var/modules/firewall/firewall-new.sh failed:
iptables: No chain/target/match by that name


proc_close() failed: var: Deprecated. Please use the public/private/protected modifiers
----
I am using Fedora Core2.

Any ideas?

Thanks in advance, Marcus
 
You do not have all of the modules used by iptables loaded.

check with command:
# lsmod | grep ip

it should return:
ipt_REJECT
ipt_state
ip_conntrack
iptable_filter
ip_tables

Also, check your boot log. you will probably find the psa-firewall module does not start.

psa-firewall: psa-firewall: service is disabled
rc: Starting psa-firewall: failed
 
same here

/etc/rc.d/init.d/psa-firewall start
psa-firewall: service is disabled

But modules are here

# lsmod | grep ip
iptable_nat 23037 0
iptable_mangle 2753 0
ipt_REJECT 6593 3
ipt_state 1857 6
ip_conntrack 40565 2 iptable_nat,ipt_state
iptable_filter 2753 1
ip_tables 17473 5 iptable_nat,iptable_mangle,ipt_REJECT,ipt_state,iptable_filter
ipv6 234881 35

And if I manually load the firewall-active.sh the rules are applied.
 
I had the same error after upgrading. A reboot started the new services that needed to be started and now its working fine.

It probably mentions this somewhere in the upgrade documentation, but I was simply using the auto updater through the control panel.
 
Back
Top