wireguard-install icon indicating copy to clipboard operation
wireguard-install copied to clipboard

Adding waiting (-w) in iptables for wg-iptables service

Open Perlover opened this issue 2 years ago • 1 comments

At one point I overloaded the server and Wireguard was not working on it. I began to understand and found out that the wg-iptables service did not start. The logs were:

May 19 17:50:27 server.domain iptables[714]: Another app is currently holding the xtables lock. Perhaps you want to use the -w option?
May 19 17:50:27 server.domain systemd[1]: wg-iptables.service: Main process exited, code=exited, status=4/NOPERMISSION
May 19 17:50:27 server.domain systemd[1]: wg-iptables.service: Failed with result 'exit-code'.
May 19 17:50:27 server.domain systemd[1]: Failed to start wg-iptables.service.

Then I started googling this problem and found out that the problem is that your startup commands do not specify to wait in case of blocking. This patch fixes the problem.

Perlover avatar May 19 '23 16:05 Perlover

@Nyr I would love to see that merged!

KaeTuuN avatar Jul 05 '23 07:07 KaeTuuN