ERROR enabling firewall: ip6tables is required, please upgrade your kernel to support it #2199

CarbonKidney · 2024-03-31T06:35:04Z

CarbonKidney
Mar 31, 2024

Problem

Hello, I am getting this error when starting gluetun. It was working a few weeks ago, but reverting to older versions still has the same problem so I'm not sure what I've changed.

ERROR enabling firewall: accept output from fe80::42:acff:fe13:3 to fe80::/64: ip6tables is required, please upgrade your kernel to support it

My host, a jetson TX2, has iptables v1.8.4 (legacy) and ip6tables v1.8.4 (legacy)

Any help is appreciated!

Host

Operating System: Ubuntu 20.04.6 LTS
Kernel: Linux 4.9.337-tegra
Architecture: arm64

Logs

gluetun  | ========================================
gluetun  | ========================================
gluetun  | =============== gluetun ================
gluetun  | ========================================
gluetun  | =========== Made with ❤️ by ============
gluetun  | ======= https://github.com/qdm12 =======
gluetun  | ========================================
gluetun  | ========================================
gluetun  |
gluetun  | Running version latest built on 2024-03-29T15:09:35.600Z (commit e859c60)
gluetun  |
gluetun  | 🔧 Need help? https://github.com/qdm12/gluetun/discussions/new
gluetun  | 🐛 Bug? https://github.com/qdm12/gluetun/issues/new
gluetun  | ✨ New feature? https://github.com/qdm12/gluetun/issues/new
gluetun  | ☕ Discussion? https://github.com/qdm12/gluetun/discussions/new
gluetun  | 💻 Email? [email protected]
gluetun  | 💰 Help me? https://www.paypal.me/qmcgaw https://github.com/sponsors/qdm12
gluetun  | 2024-03-31T01:39:11-04:00 WARN You are using the old environment variable HTTPPROXY_LOG, please consider changing it to
gluetun  | 2024-03-31T01:39:11-04:00 INFO [routing] default route found: interface eth0, gateway 172.19.0.1, assigned IP 172.19.0.3 and family v4
gluetun  | 2024-03-31T01:39:11-04:00 INFO [routing] local ethernet link found: eth0
gluetun  | 2024-03-31T01:39:11-04:00 INFO [routing] local ipnet found: 172.19.0.0/16
gluetun  | 2024-03-31T01:39:11-04:00 INFO [routing] local ipnet found: fe80::/64
gluetun  | 2024-03-31T01:39:11-04:00 INFO [firewall] enabling...
gluetun  | 2024-03-31T01:39:11-04:00 DEBUG [firewall] iptables --policy INPUT DROP
gluetun  | 2024-03-31T01:39:11-04:00 DEBUG [firewall] iptables --policy OUTPUT DROP
gluetun  | 2024-03-31T01:39:11-04:00 DEBUG [firewall] iptables --policy FORWARD DROP
gluetun  | 2024-03-31T01:39:11-04:00 DEBUG [firewall] iptables --append INPUT -i lo -j ACCEPT
gluetun  | 2024-03-31T01:39:11-04:00 DEBUG [firewall] iptables --append OUTPUT -o lo -j ACCEPT
gluetun  | 2024-03-31T01:39:11-04:00 DEBUG [firewall] iptables --append OUTPUT -m conntrack --ctstate ESTABLISHED,RELATED -j ACCEPT
gluetun  | 2024-03-31T01:39:11-04:00 DEBUG [firewall] iptables --append INPUT -m conntrack --ctstate ESTABLISHED,RELATED -j ACCEPT
gluetun  | 2024-03-31T01:39:11-04:00 DEBUG [firewall] iptables --append OUTPUT -o eth0 -s 172.19.0.3 -d 172.19.0.0/16 -j ACCEPT
gluetun  | 2024-03-31T01:39:11-04:00 DEBUG [firewall] iptables --flush
gluetun  | 2024-03-31T01:39:11-04:00 DEBUG [firewall] iptables --delete-chain
gluetun  | 2024-03-31T01:39:11-04:00 DEBUG [firewall] iptables --policy INPUT ACCEPT
gluetun  | 2024-03-31T01:39:11-04:00 DEBUG [firewall] iptables --policy OUTPUT ACCEPT
gluetun  | 2024-03-31T01:39:11-04:00 DEBUG [firewall] iptables --policy FORWARD ACCEPT
gluetun  | 2024-03-31T01:39:11-04:00 ERROR enabling firewall: accept output from fe80::42:acff:fe13:3 to fe80::/64: ip6tables is required, please upgrade your kernel to support it
gluetun  | 2024-03-31T01:39:11-04:00 INFO Shutdown successful

Config

  gluetun:
    image: qmcgaw/gluetun
    container_name: gluetun
    cap_add:
      - NET_ADMIN
    environment:
      - VPN_SERVICE_PROVIDER=surfshark
      - OPENVPN_USER=${VPN_USERNAME}
      - OPENVPN_PASSWORD=${VPN_PASSWORD}
      - SERVER_HOSTNAMES=ca-tor.prod.surfshark.com
      - TZ=America/Toronto
      - FIREWALL_DEBUG=on
    volumes:
      - ./gluetun:/gluetun