I have a CentOS server that I recently ran yum-update on and the only update was to centos-release. I applied the update and ever since FirewallD has been throwing errors.
I uninstalled and reinstalled the package thinking I may have just broken the configuration, but now any time I try and start FirewallD with the service command I am told the service failed and given the following output
Dec 17 15:54:57 DMZ01 systemd[1]: Starting firewalld - dynamic firewall daemon...
-- Subject: Unit firewalld.service has begun start-up
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
--
-- Unit firewalld.service has begun starting up.
Dec 17 15:54:57 DMZ01 systemd[1]: firewalld.service: main process exited, code=exited, status=1/FAILURE
Dec 17 15:54:57 DMZ01 systemd[1]: Failed to start firewalld - dynamic firewall daemon.
-- Subject: Unit firewalld.service has failed
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
--
-- Unit firewalld.service has failed.
--
-- The result is failed.
Dec 17 15:54:57 DMZ01 systemd[1]: Unit firewalld.service entered failed state.
Dec 17 15:54:57 DMZ01 systemd[1]: firewalld.service failed.
Running any firewall-cmd
commands simply tells me Firewalld is not running.
The results of cat /etc/centor-release
is : CentOS Linux release 7.9.2009 (Core)
Running the firewalld
command with the --debug
argument immediately terminates my connection to the server and locks all incoming connections out. I have to manually restart the server in order to regain entry.
The output of the debug command dumps to /var/log/firewalld
and can be viewed here:
https://pastebin.com/N81tWkhj
Output of /etc/firewalld/zones/public.xml
<?xml version="1.0" encoding="utf-8"?>
<zone target="default">
<short>Public</short>
<description>For use in public areas. You do not trust the other computers on networks to not harm your computer. Only selected incoming connections are accepted.</description>
<port protocol="tcp" port="21"/>
<port protocol="tcp" port="60000-65335"/>
</zone>