topic Re: Failed to start Dynatrace Firewall in Open Q&A

Failed to start Dynatrace Firewall

Gerardo_FO — Wed, 20 Nov 2024 16:54:20 GMT

Hello

After upgraded RedHat 9.5 (kernel-5.14.0-503.11.1.el9_5.x86_64) the dynatrace-firewall.service has been Failed

How could I fix the problem ???

dynatrace-firewall.service - Dynatrace Firewall settings

Loaded: loaded (/etc/systemd/system/dynatrace-firewall.service; enabled; preset: disabled)

Active: failed (Result: exit-code) since Wed 2024-11-13 10:48:24 CST; 1min 28s ago

Process: 2567 ExecStart=/opt/dynatrace-managed/firewall/services/firewall.sh start (code=exited, status=1/FAILURE)

Main PID: 2567 (code=exited, status=1/FAILURE)

CPU: 203ms

Nov 13 10:48:24 MX2DY02BSAB firewall.sh[2871]: Error: Could not process rule: Operation not permitted

Nov 13 10:48:24 MX2DY02BSAB firewall.sh[2871]: insert rule inet firewalld filter_INPUT jump dt_filter_INPUT

Nov 13 10:48:24 MX2DY02BSAB firewall.sh[2871]: ^^^^^^^^^

Nov 13 10:48:24 MX2DY02BSAB firewall.sh[2878]: Error: Could not process rule: Operation not permitted

Nov 13 10:48:24 MX2DY02BSAB firewall.sh[2878]: insert rule inet firewalld filter_FORWARD jump dt_filter_FORWARD

Nov 13 10:48:24 MX2DY02BSAB firewall.sh[2878]: ^^^^^^^^^

Nov 13 10:48:24 MX2DY02BSAB firewall.sh[2567]: Adding rules ... failed.

Nov 13 10:48:24 MX2DY02BSAB systemd[1]: dynatrace-firewall.service: Main process exited, code=exited, status=1/FAILURE

Nov 13 10:48:24 MX2DY02BSAB systemd[1]: dynatrace-firewall.service: Failed with result 'exit-code'.

Nov 13 10:48:24 MX2DY02BSAB systemd[1]: Failed to start Dynatrace Firewall settings.

Redirecting to /bin/systemctl status dynatrace-nodekeeper.service

p_devulapalli — Sun, 24 Nov 2024 22:29:52 GMT

@Gerardo_FO Please see below

Peter_Youssef — Mon, 25 Nov 2024 06:35:45 GMT

In addition to the provided guidance by @p_devulapalli

PFA resources for further troubleshooting:

Run the attached commands:

systemctl status dynatrace-firewall
systemctl stop dynatrace-firewall
systemctl restart dynatrace-firewall

Proceed with cluster Operations:

If you need to simulate another scenario feel free to review:

Hoping it helps.

BR,

Peter