{"action":"created","issue":{"url":"https://api.github.com/repos/docker/docker/issues/15948","labels_url":"https://api.github.com/repos/docker/docker/issues/15948/labels{/name}","comments_url":"https://api.github.com/repos/docker/docker/issues/15948/comments","events_url":"https://api.github.com/repos/docker/docker/issues/15948/events","html_url":"https://github.com/docker/docker/issues/15948","id":104049694,"number":15948,"title":"Docker fails to create iptables rules?","user":{"login":"aanm","id":5714066,"avatar_url":"https://avatars.githubusercontent.com/u/5714066?v=3","gravatar_id":"","url":"https://api.github.com/users/aanm","html_url":"https://github.com/aanm","followers_url":"https://api.github.com/users/aanm/followers","following_url":"https://api.github.com/users/aanm/following{/other_user}","gists_url":"https://api.github.com/users/aanm/gists{/gist_id}","starred_url":"https://api.github.com/users/aanm/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/aanm/subscriptions","organizations_url":"https://api.github.com/users/aanm/orgs","repos_url":"https://api.github.com/users/aanm/repos","events_url":"https://api.github.com/users/aanm/events{/privacy}","received_events_url":"https://api.github.com/users/aanm/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/docker/docker/labels/group/networking","name":"group/networking","color":"F6FBFF"}],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":20,"created_at":"2015-08-31T13:04:50Z","updated_at":"2015-12-26T22:37:44Z","closed_at":"2015-09-03T18:49:20Z","body":"I've installed docker with the get.docker.com script on fedora 22 and I have these messages under journalctl:\r\n```\r\nAgo 31 13:53:01 localhost.localdomain docker[1591]: time=\"2015-08-31T13:53:01.475201320+01:00\" level=info msg=\"Firewalld running: true\"\r\nAgo 31 13:53:01 localhost.localdomain firewalld[1232]: 2015-08-31 13:53:01 ERROR: COMMAND_FAILED: '/sbin/iptables -w -t nat -D PREROUTING -m addrtype --dst-type LOCAL -j DOCKER' failed: iptables v1.4.21: Couldn't load target `DOCKER':No s\r\n                                                       \r\n                                                       Try `iptables -h' or 'iptables --help' for more information.\r\nAgo 31 13:53:01 localhost.localdomain firewalld[1232]: 2015-08-31 13:53:01 ERROR: COMMAND_FAILED: '/sbin/iptables -w -t nat -D OUTPUT -m addrtype --dst-type LOCAL ! --dst 127.0.0.0/8 -j DOCKER' failed: iptables v1.4.21: Couldn't load targ\r\n                                                       \r\n                                                       Try `iptables -h' or 'iptables --help' for more information.\r\nAgo 31 13:53:01 localhost.localdomain firewalld[1232]: 2015-08-31 13:53:01 ERROR: COMMAND_FAILED: '/sbin/iptables -w -t nat -D OUTPUT -m addrtype --dst-type LOCAL -j DOCKER' failed: iptables v1.4.21: Couldn't load target `DOCKER':No such \r\n                                                       \r\n                                                       Try `iptables -h' or 'iptables --help' for more information.\r\nAgo 31 13:53:01 localhost.localdomain firewalld[1232]: 2015-08-31 13:53:01 ERROR: COMMAND_FAILED: '/sbin/iptables -w -t nat -D PREROUTING' failed: iptables: Bad rule (does a matching rule exist in that chain?).\r\nAgo 31 13:53:01 localhost.localdomain firewalld[1232]: 2015-08-31 13:53:01 ERROR: COMMAND_FAILED: '/sbin/iptables -w -t nat -D OUTPUT' failed: iptables: Bad rule (does a matching rule exist in that chain?).\r\nAgo 31 13:53:01 localhost.localdomain firewalld[1232]: 2015-08-31 13:53:01 ERROR: COMMAND_FAILED: '/sbin/iptables -w -t nat -F DOCKER' failed: iptables: No chain/target/match by that name.\r\nAgo 31 13:53:01 localhost.localdomain firewalld[1232]: 2015-08-31 13:53:01 ERROR: COMMAND_FAILED: '/sbin/iptables -w -t nat -X DOCKER' failed: iptables: No chain/target/match by that name.\r\n```\r\n\r\n```\r\ndocker version\r\nClient:\r\n Version:      1.8.1\r\n API version:  1.20\r\n Go version:   go1.4.2\r\n Git commit:   d12ea79\r\n Built:        Thu Aug 13 02:39:27 UTC 2015\r\n OS/Arch:      linux/amd64\r\n\r\nServer:\r\n Version:      1.8.1\r\n API version:  1.20\r\n Go version:   go1.4.2\r\n Git commit:   d12ea79\r\n Built:        Thu Aug 13 02:39:27 UTC 2015\r\n OS/Arch:      linux/amd64\r\n```"},"comment":{"url":"https://api.github.com/repos/docker/docker/issues/comments/167369535","html_url":"https://github.com/docker/docker/issues/15948#issuecomment-167369535","issue_url":"https://api.github.com/repos/docker/docker/issues/15948","id":167369535,"user":{"login":"danielkza","id":747342,"avatar_url":"https://avatars.githubusercontent.com/u/747342?v=3","gravatar_id":"","url":"https://api.github.com/users/danielkza","html_url":"https://github.com/danielkza","followers_url":"https://api.github.com/users/danielkza/followers","following_url":"https://api.github.com/users/danielkza/following{/other_user}","gists_url":"https://api.github.com/users/danielkza/gists{/gist_id}","starred_url":"https://api.github.com/users/danielkza/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/danielkza/subscriptions","organizations_url":"https://api.github.com/users/danielkza/orgs","repos_url":"https://api.github.com/users/danielkza/repos","events_url":"https://api.github.com/users/danielkza/events{/privacy}","received_events_url":"https://api.github.com/users/danielkza/received_events","type":"User","site_admin":false},"created_at":"2015-12-26T22:37:43Z","updated_at":"2015-12-26T22:37:43Z","body":"@thaJeztah Docker is already started after firewalld due to the ordering dependency on network.target. I've also tried stopping and starting both manually in different combinations to no avail.\r\n\r\nI also have docker-selinux installed, but as I mentioned SELinux is set to permissive system-wide, so it shouldn't be the issue.\r\n\r\nDoes the DigitalOcean Fedora image actually include firewalld, or did you in install it manually? Did you create any custom rules/zones or anything or the sort?"}}