• Halloween is coming! To celebrate the occasion, we dusted off a couple of old skins, and even created a brand new one (Pixel).
    To get into the festive spirit, install the Skins extension.
  • The new Python extension is now available. It allows customers to deploy and manage WSGI-based Python applications on their websites directly from Plesk.
  • The Plesk Mobile apps for iOS and Android and the Plesk Mobile Center extension have been deprecated, and are no longer available for new installations. In Plesk Obsidian 18.0.84, the Plesk Mobile Center extension will be removed from servers during the upgrade, and the Plesk Mobile apps will lose their server management features.
  • The Social Login extension has been deprecated and will be removed in Plesk Obsidian 18.0.84. After that, it will no longer be possible to log in to Plesk with a Google, Facebook, GitHub account, or with a passkey. Plesk usernames and passwords, as well as logging in with a WebPros Account, are not affected.

Firewall Activation Error

O

originalmguy

Guest
Hi there,

Just a quick question. Hopefully someone can help.
After I edit/add rules to the firewall module and try to activate it I get the following error:

----
Error: Could not activate firewall configuration:

safeact: safeact: /usr/local/psa/var/modules/firewall/firewall-new.sh failed:
iptables: No chain/target/match by that name


proc_close() failed: var: Deprecated. Please use the public/private/protected modifiers
----
I am using Fedora Core2.

Any ideas?

Thanks in advance, Marcus
 
You do not have all of the modules used by iptables loaded.

check with command:
# lsmod | grep ip

it should return:
ipt_REJECT
ipt_state
ip_conntrack
iptable_filter
ip_tables

Also, check your boot log. you will probably find the psa-firewall module does not start.

psa-firewall: psa-firewall: service is disabled
rc: Starting psa-firewall: failed
 
same here

/etc/rc.d/init.d/psa-firewall start
psa-firewall: service is disabled

But modules are here

# lsmod | grep ip
iptable_nat 23037 0
iptable_mangle 2753 0
ipt_REJECT 6593 3
ipt_state 1857 6
ip_conntrack 40565 2 iptable_nat,ipt_state
iptable_filter 2753 1
ip_tables 17473 5 iptable_nat,iptable_mangle,ipt_REJECT,ipt_state,iptable_filter
ipv6 234881 35

And if I manually load the firewall-active.sh the rules are applied.
 
I had the same error after upgrading. A reboot started the new services that needed to be started and now its working fine.

It probably mentions this somewhere in the upgrade documentation, but I was simply using the auto updater through the control panel.
 
Back
Top