`sh -x /lib/ufw/ufw-init restart` shows that the failing commands are

    + printf *filter\n-A ufw-track-input -p tcp -m conntrack --ctstate NEW -j 
ACCEPT\n-A ufw-track-input -p udp -m conntrack --ctstate NEW -j ACCEPT\nCOMMIT\n
    + iptables-restore -n
    iptables-restore: line 4 failed
    + error=yes
    + [ ACCEPT = ACCEPT ]
    + printf *filter\n-A ufw-track-output -p tcp -m conntrack --ctstate NEW -j 
ACCEPT\n-A ufw-track-output -p udp -m conntrack --ctstate NEW -j 
ACCEPT\nCOMMIT\n
    + iptables-restore -n
    iptables-restore: line 4 failed
    + error=yes

lsmod shows that xt_conntrack and nf_conntrack modules are loaded.
dmesg and journalctl don't seem to be showing any kernel error messages
related to the iptables failure.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2171087

Title:
  `ufw enable` sets policy but doesn't add any rules, fails with "ERROR:
  problem running ufw-init", leaves machine unreachable over SSH

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/ufw/+bug/2171087/+subscriptions


-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to