Bug#867560: moreinfo

2017-08-01 Thread gustavo panizzo
Hello I was able to reproduce your problem setting iptables rules with hostnames on it (as netfilter-persistent runs before the network is up it can't resolv) if that is not the problem can you please edit /usr/share/netfilter-persistent/plugins.d/15-ip4tables and edit the line #23 to make it lo

Bug#867560: moreinfo

2017-07-15 Thread tmp221
Hi! > Can you show your rules? Sure. ## *filter # Default policies :INPUT DROP :FORWARD DROP :OUTPUT ACCEPT # Accept all loopback traffic -A INPUT -i lo -j ACCEPT # Drop spoofed packets -A INPUT ! -i lo -s 127.0.0.0/8 -j DROP -A INPUT ! -i lo -d 127.0.0.0/8 -j DROP -A INPUT -s 10.0.0

Bug#867560: moreinfo

2017-07-15 Thread gustavo panizzo
Control: tags -1 + moreinfo thanks Hello Can you show your rules? do you have a custom kernel? I suspect some of your rules may need kernel modules not already loaded. Can you run `lsmod` when the restore fails and when it works? Regarding your last paragraph, rules can be created before th