Gentoo Forums
Gentoo Forums
Gentoo Forums
Quick Search: in
Iptables virtual service warning...
View unanswered posts
View posts from last 24 hours

 
Reply to topic    Gentoo Forums Forum Index Networking & Security
View previous topic :: View next topic  
Author Message
The_Great_Sephiroth
Veteran
Veteran


Joined: 03 Oct 2014
Posts: 1602
Location: Fayetteville, NC, USA

PostPosted: Thu Jul 26, 2018 2:09 pm    Post subject: Iptables virtual service warning... Reply with quote

OK, I googled for this but did not find anything helpful, so I am going to ask here. For over a year I have been getting the following upon boot and upon restarting certain services.
Code:

Error: iptables is the name of a real and virtual service.
Error: ip6tables is the name of a real and virtual service.
Error: ebtables is the name of a real and virtual service.

What is this, how do I fix it, or how do I silence it? I believe my firewall is working just fine.
_________________
Ever picture systemd as what runs "The Borg"?
Back to top
View user's profile Send private message
Ant P.
Watchman
Watchman


Joined: 18 Apr 2009
Posts: 6920

PostPosted: Thu Jul 26, 2018 9:47 pm    Post subject: Reply with quote

Run this:
Code:
egrep -r '\bprovide ' /etc/init.d/

If you see any files that mention iptables in the list, check that they're owned by some package. Things in /etc/init.d/ sometimes don't get uninstalled automatically but openrc still picks up on them.
Back to top
View user's profile Send private message
The_Great_Sephiroth
Veteran
Veteran


Joined: 03 Oct 2014
Posts: 1602
Location: Fayetteville, NC, USA

PostPosted: Thu Aug 02, 2018 3:49 pm    Post subject: Reply with quote

I ran the script you posted and got the results as follows.
Code:

~ $ sudo egrep -r '\bprovide ' /etc/init.d/
Password:
/etc/init.d/net.lo:                     provide net
/etc/init.d/net.lo:     for dep in need use before after provide keyword; do
/etc/init.d/opentmpfiles-setup: provide tmpfiles-setup tmpfiles.setup
/etc/init.d/swclock:    provide clock
/etc/init.d/devfs:      provide dev-mount
/etc/init.d/udev-trigger:       provide dev
/etc/init.d/osclock:    provide clock
/etc/init.d/hwclock:    provide clock
/etc/init.d/net-online: provide network-online
/etc/init.d/udev-settle:        provide dev-settle
/etc/init.d/opentmpfiles-dev:   provide tmpfiles-dev tmpfiles.dev
/etc/init.d/sysklogd:   provide logger
/etc/init.d/lircd:      provide lirc
/etc/init.d/busybox-syslogd:    provide logger
/etc/init.d/ipsec:      provide ipsec
/etc/init.d/cronie:     provide cron
/etc/init.d/NetworkManager:     provide net
/etc/init.d/dmcrypt:                    # This is ugly as s**t.  But POSIX doesn't provide `read -t`, so
/etc/init.d/firewalld:  provide iptables ip6tables ebtables

Everything there is owned by something on the system. For example, I use firewalld for firewall zones in NetworkManager in Plasma. Obviously net.lo is needed, NetworkManager is used, as is cronie, sysklogd, etc. The only thing I am not sure of is "net-online". I did not explicitly install it, but it is there.
Code:

~ $ sudo equery depends net-online
 * These packages depend on net-online:

Nothing appears to need it. Should I remove it?

*EDIT*

It doesn't seem to be a package at all.
Code:

~ $ sudo emerge --search net-online
 
[ Results for search key : net-online ]
Searching...

[ Applications found : 0 ]

_________________
Ever picture systemd as what runs "The Borg"?
Back to top
View user's profile Send private message
Ant P.
Watchman
Watchman


Joined: 18 Apr 2009
Posts: 6920

PostPosted: Thu Aug 02, 2018 7:53 pm    Post subject: Reply with quote

firewalld is the problem, bug already filed here
Back to top
View user's profile Send private message
Hu
Moderator
Moderator


Joined: 06 Mar 2007
Posts: 21602

PostPosted: Fri Aug 03, 2018 12:18 am    Post subject: Reply with quote

As you discovered, /etc/init.d/net-online is owned by a package with a name other than net-online, so you cannot use equery depends net-online to check whether it is needed. Instead, use equery belongs /etc/init.d/net-online to find the owning package, then use equery depends or emerge --pretend --verbose --depclean on that package.
Back to top
View user's profile Send private message
khayyam
Watchman
Watchman


Joined: 07 Jun 2012
Posts: 6227
Location: Room 101

PostPosted: Fri Aug 03, 2018 9:53 am    Post subject: Reply with quote

The_Great_Sephiroth wrote:
The only thing I am not sure of is "net-online". I did not explicitly install it, but it is there.

The_Great_Sephiroth ... net-online is owned by sys-apps/openrc, and "delays until the network is online or a specific timeout".

best ... khay
Back to top
View user's profile Send private message
The_Great_Sephiroth
Veteran
Veteran


Joined: 03 Oct 2014
Posts: 1602
Location: Fayetteville, NC, USA

PostPosted: Tue Aug 07, 2018 1:50 pm    Post subject: Reply with quote

Thanks for the information. As soon as firewalld fixes the issue I will mark this as solved.
_________________
Ever picture systemd as what runs "The Borg"?
Back to top
View user's profile Send private message
Display posts from previous:   
Reply to topic    Gentoo Forums Forum Index Networking & Security All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum