iptables: No chain/target/match error (with docker network create)

Question

When creating a network (docker network create -d bridge my-nw), I obtained this error in response:

Error response from daemon: Failed to Setup IP tables: Unable to enable SKIP DNAT rule: (iptables failed: iptables --wait -t nat -I DOCKER -i br-bedba04c7349 -j RETURN: iptables: No chain/target/match by that name.

What do I need to do to go around? Docker or IP Table modifications?

score 80 · Answer 1 · answered Dec 13 '18 at 17:07

80

Something has deleted the docker iptables entries. Docker will recreate them if you restart it (systemctl restart docker). You'll want to disable anything else that manages iptables to prevent this from happening in the future.

answered Dec 13 '18 at 17:07

BMitch

231,797
42
475
450

This command restarts the whole docker but you can just restart docker.socket – behrad Feb 01 '23 at 07:09
@behrad Restarting the socket restarts the docker daemon, it's a dependency for running the engine. The code to reset the firewall settings is part of the engine startup. – BMitch Feb 01 '23 at 14:48

score 18 · Answer 2 · answered Nov 24 '21 at 12:12

18

sudo systemctl restart docker.socket

answered Nov 24 '21 at 12:12

Mohamed Farouk

957
1
13
29

indeed that fixes the issue, but that would even better if one could explain the root cause. – Baptiste Mille-Mathias Jan 11 '23 at 09:09
1

https://stackoverflow.com/questions/35110146/can-anyone-explain-docker-sock -@BaptisteMille-Mathias – Mohamed Farouk Jan 11 '23 at 22:42
This will result in the docker engine being restarted. See the output of `systemctl cat docker | grep docker.socket` to see the dependency. – BMitch Feb 01 '23 at 14:50

score 3 · Answer 3 · answered Dec 14 '18 at 18:13

3

This can happen when you accidently flush all your chains and tables, for example using iptables --flush. Simply restart your docker daemon as mentioned by BMitch

answered Dec 14 '18 at 18:13

Nevolution

41
2

iptables: No chain/target/match error (with docker network create)

3 Answers3

Linked