`sh -x /lib/ufw/ufw-init restart` shows that the failing commands are
+ printf *filter\n-A ufw-track-input -p tcp -m conntrack --ctstate NEW -j
ACCEPT\n-A ufw-track-input -p udp -m conntrack --ctstate NEW -j ACCEPT\nCOMMIT\n
+ iptables-restore -n
iptables-restore: line 4 failed
+ error=yes
+ [ ACCEPT = ACCEPT ]
+ printf *filter\n-A ufw-track-output -p tcp -m conntrack --ctstate NEW -j
ACCEPT\n-A ufw-track-output -p udp -m conntrack --ctstate NEW -j
ACCEPT\nCOMMIT\n
+ iptables-restore -n
iptables-restore: line 4 failed
+ error=yes
lsmod shows that xt_conntrack and nf_conntrack modules are loaded.
dmesg and journalctl don't seem to be showing any kernel error messages
related to the iptables failure.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2171087
Title:
`ufw enable` sets policy but doesn't add any rules, fails with "ERROR:
problem running ufw-init", leaves machine unreachable over SSH
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/ufw/+bug/2171087/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs