Page MenuHomePureOS Tracker

iptables default rules cleared and internet inaccessible, after recent upgrade
Open, HighPublic


Version: PureOS 10 (byzantium)

Problem: Users reported that after recent upgrade internet is inaccessible. Seems that iptables firewall rules were set to block all traffic by default.

Workaround: Run following commands in terminal, one by one:

sudo iptables -P INPUT ACCEPT

sudo iptables -P FORWARD ACCEPT

sudo iptables -P OUTPUT ACCEPT

sudo iptables -t nat -F

sudo iptables -t mangle -F

sudo iptables -F

sudo iptables -X

(will not persist through reboot)

Event Timeline

mladen triaged this task as High priority.Oct 15 2021, 12:43
mladen created this task.
mladen added a comment.Oct 15 2021, 14:07

A user found out possible cause:

I think the changes the fixed it were to:
Uninstall gufw using:
apt-get purge gufw
rm -rf /etc/gufw
There was strange behavior with gufw, it would not stay enabled through a reboot. Enabling the default rule in gufw also made the network re-appear, however it would not stay enabled through a reboot.
This change, removing gufw, was not enough on it's own. It was also necessary to run:
iptables -P INPUT ACCEPT
As these would be defined as DROP after each reboot. I compared the tables with another installation of Byzantium without the latest updates and these changes made it identical. However upon restart these changes would also disappear.
So the next change was necessary:
apt-get install iptables-persistent
And then saving the rules with the above changes. This time upon restart the rules were persisted. Furthermore the 1 to 2 minute delay at both boot and at login were both gone now.

ctowne added a subscriber: ctowne.Oct 19 2021, 19:06

I am running a Librem14 (5.10.0-9-amd64) and was experiencing this same issue. Instead of purging gufw I needed to purge ufw. Before purging I noticed the ufw service was in a masked state after removing the package with apt. I also cleaned up /etc/ufw after the purge. I used the iptables rules in this bug report as a workaround and saved those to /etc/iptables/rule.v4 and .v6 so iptables-persistent would see them and rebooted. This fixed my issue, the networking was restored and the machine no longer would hang after decrypting the drive.

After the update I also had a issue with my sound were it longer seemed to recognize the onboard speakers. The first indication was that the sound icon was missing from the top tray. I'd also like to report this fixed the issue with the sound as well. After purging ufw, installing iptables-persistent and adding the iptables rules the tray icon came back and I tam able to play audio again.