解决报错Error: COMMAND_FAILED: Direct: '/usr/sbin/iptables-restore -w -n' failed: ip

admin

[root@vpnserver firewalld]# firewall-cmd --reload
Error: COMMAND_FAILED: Direct: '/usr/sbin/iptables-restore -w -n' failed: iptables-restore v1.4.21: unknown option "-O"
Error occurred at line: 2
  {' k2 H2 f4 nTry `iptables-restore -h' or 'iptables-restore --help' for more information.
/ |) ~5 c! q) Z. D
7 _- U7 W; ?6 F# U. e7 \0 |上面报错
/ Q6 j: x, y3 F4 Z* v5 S& D解决办法：
: X4 O) q+ ]- [- Y0 w! q  e4 S4 Q
到/etc/firewalld目录下：

[root@vpnserver firewalld]# vim direct.xml
. V$ X* B3 [8 z9 h" V2 `注释掉前两行即可：
( @2 D5 z! ?# J5 E+ `
<?xml version="1.0" encoding="utf-8"?>
0 T9 I; q' J, x9 S& R4 h<direct>
6 I' w* Y4 P6 D: g$ E0 D/ [  <passthrough ipv="ipv4">-t nat -A POSTROUTING -s 10.10.10.0/24 -O ens33 -j MASQUERADE</passthrough>
  <passthrough ipv="ipv4">-t nat -A POSTROUTING -s 10.10.10.0/24 -0 ens33 -j MASQUERADE</passthrough>
8 \' }- k) P5 C  P  O- z  <passthrough ipv="ipv4">-t nat -A POSTROUTING -s 10.10.10.0/24 -o ens33 -j MASQUERADE</passthrough>
; @' h/ X* G5 n6 z% Q& A7 f</direct>
9 c6 F* M0 k) c1 @) u: r1 y
改后的文件内容：
" u, s, c5 m  w9 ~  Z+ x5 P5 d
<?xml version="1.0" encoding="utf-8"?>
<direct>
  <!--<passthrough ipv="ipv4">-t nat -A POSTROUTING -s 10.10.10.0/24 -O ens33 -j MASQUERADE</passthrough> -->
  <!--<passthrough ipv="ipv4">-t nat -A POSTROUTING -s 10.10.10.0/24 -0 ens33 -j MASQUERADE</passthrough> -->
  <passthrough ipv="ipv4">-t nat -A POSTROUTING -s 10.10.10.0/24 -o ens33 -j MASQUERADE</passthrough>
</direct>
* l, Z- i6 R2 w5 Q


  ]2 B% E" t" Y$ I+ i% {& h[root@vpnserver firewalld]# firewall-cmd --reload
success
6 a( `% t9 }* R3 `' }1 b不再报错。
& ^- {6 Y( O! F0 [0 b

问题解决。