解决报错Error: COMMAND_FAILED: Direct: '/usr/sbin/iptables-restore -w -n' failed: ip

admin

[root@vpnserver firewalld]# firewall-cmd --reload
Error: COMMAND_FAILED: Direct: '/usr/sbin/iptables-restore -w -n' failed: iptables-restore v1.4.21: unknown option "-O"
Error occurred at line: 2
Try `iptables-restore -h' or 'iptables-restore --help' for more information.

0 b9 s! d5 r& u# r1 C0 t. k上面报错
# f+ i  v' y. S$ I9 K* h  N3 _解决办法：

到/etc/firewalld目录下：

6 q/ G8 O; O+ H! u- a( q7 j[root@vpnserver firewalld]# vim direct.xml
8 L$ Q8 l. H2 o' _+ g1 S( p注释掉前两行即可：
/ k4 V7 @" `, ?# `; A
2 C* ]4 N6 Z1 [2 J$ s6 |<?xml version="1.0" encoding="utf-8"?>
<direct>
/ W1 f& j* X, B. q/ T$ e  <passthrough ipv="ipv4">-t nat -A POSTROUTING -s 10.10.10.0/24 -O ens33 -j MASQUERADE</passthrough>
  <passthrough ipv="ipv4">-t nat -A POSTROUTING -s 10.10.10.0/24 -0 ens33 -j MASQUERADE</passthrough>
  <passthrough ipv="ipv4">-t nat -A POSTROUTING -s 10.10.10.0/24 -o ens33 -j MASQUERADE</passthrough>
</direct>

, }4 n" ?$ d4 E) `. O' q3 g改后的文件内容：
* K% p$ y" \, O6 c/ b4 _4 l0 M+ D
<?xml version="1.0" encoding="utf-8"?>
9 Q$ D+ U5 }! L. P# \" N8 f+ E<direct>
, o, _4 n6 _9 i9 `. \# c% M  <!--<passthrough ipv="ipv4">-t nat -A POSTROUTING -s 10.10.10.0/24 -O ens33 -j MASQUERADE</passthrough> -->
  <!--<passthrough ipv="ipv4">-t nat -A POSTROUTING -s 10.10.10.0/24 -0 ens33 -j MASQUERADE</passthrough> -->
  <passthrough ipv="ipv4">-t nat -A POSTROUTING -s 10.10.10.0/24 -o ens33 -j MASQUERADE</passthrough>
( u9 f4 H5 C# l, g( k6 e</direct>
: x* {8 d0 R1 u6 p+ f* R
3 \0 c; e# A# J8 I; c9 ^  }
# l: v% ]6 x, d. @
4 _  E' `1 x, P" w, M' {[root@vpnserver firewalld]# firewall-cmd --reload
" z5 b' m6 W+ A* N3 f9 ~success
不再报错。


问题解决。