Failed to create tunnel while processing prepare request about tunneldigger HOT 3 CLOSED

Seems like this fails (in tunnel.py):

        try:
            nat = netfilter.table.Table('nat')
            nat.append_rule('L2TP_PREROUTING_%s' % self.broker.tunnel_manager.namespace, self.prerouting_rule)
            nat.append_rule('L2TP_POSTROUTING_%s' % self.broker.tunnel_manager.namespace, self.postrouting_rule)
        except netfilter.table.IptablesError:
            raise TunnelSetupFailed

Unfortunately tunneldigger isn't great at error reporting, all the details are thrown away here. You could try replaying the last two lines by

        except netfilter.table.IptablesError as err:
            logger.error("Netfilter error while setting up NAT: %s" % err)
            raise TunnelSetupFailed

That should put a more useful error message into the log. What does it say?

from tunneldigger.

This should definitely be in the sources.
Error was:
message: iptables: No chain/target/match by that name.
We are handling iptables in our own firewall using shorewall which caused the chains to disappear on rule reload.
I commented out both nat rules and broker is working fine again.

from tunneldigger.

This should definitely be in the sources.

Probably not like this, but rather something that attaches the original error to the TunnelSetupFailed.

Could you open an issue to track throwing away error information? This is not the only place where errors gets dropped.

I commented out both nat rules and broker is working fine again.

You mean you changed tunneldigger to not emit these rules? That shouldn't work, these are needed for all the connections to share the same port on the server.

from tunneldigger.