iptables chains get lost on client service restart #1811

Open
opened 2025-11-20 06:07:14 -05:00 by saavagebueno · 3 comments
Owner

Originally created by @Gaulomatic on GitHub (Apr 12, 2025).

iptables chains are not restored after a client service restart or down/up command.

To Reproduce

Either:
systemctl restart netbird

Or:
netbird down
netbird up

Expected behavior
I expect the iptables chains to be maintained so that policies still apply.

Are you using NetBird Cloud?
No, self-hosted on Oracle Linux 9.5 in the Oracle cloud.

NetBird version
v0.40.1

Is any other VPN software installed?
No.

Screenshots
Before restart:

Image

After restart:

Image

Have you tried these troubleshooting steps?

  • Checked for newer NetBird versions
  • Searched for similar issues on GitHub (including closed ones)
  • Restarted the NetBird client
  • Disabled other VPN software
  • Checked firewall settings
Originally created by @Gaulomatic on GitHub (Apr 12, 2025). iptables chains are not restored after a client service restart or down/up command. **To Reproduce** Either: `systemctl restart netbird` Or: `netbird down` `netbird up` **Expected behavior** I expect the iptables chains to be maintained so that policies still apply. **Are you using NetBird Cloud?** No, self-hosted on Oracle Linux 9.5 in the Oracle cloud. **NetBird version** v0.40.1 **Is any other VPN software installed?** No. **Screenshots** Before restart: <img width="960" alt="Image" src="https://github.com/user-attachments/assets/e8c91736-54ca-4567-a3f8-ea14702c5731" /> After restart: <img width="932" alt="Image" src="https://github.com/user-attachments/assets/c06f3c5e-c023-4a6a-b438-a513c6b787e5" /> **Have you tried these troubleshooting steps?** - [X] Checked for newer NetBird versions - [X] Searched for similar issues on GitHub (including closed ones) - [X] Restarted the NetBird client - [X] Disabled other VPN software - [X] Checked firewall settings
saavagebueno added the triage-needed label 2025-11-20 06:07:15 -05:00
Author
Owner

@lixmal commented on GitHub (Apr 14, 2025):

Hi @Gaulomatic,

I believe nftables is being used here instead, you can check with nft list table netbird.

@lixmal commented on GitHub (Apr 14, 2025): Hi @Gaulomatic, I believe nftables is being used here instead, you can check with `nft list table netbird`.
Author
Owner

@yaneony commented on GitHub (Oct 19, 2025):

Have same issue on Debian 13, nftables isn't installed.

@yaneony commented on GitHub (Oct 19, 2025): Have same issue on Debian 13, nftables isn't installed.
Author
Owner

@lixmal commented on GitHub (Oct 20, 2025):

@yaneony you can install the nftables package and check. What is the issue exactly?

@lixmal commented on GitHub (Oct 20, 2025): @yaneony you can install the nftables package and check. What is the issue exactly?
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: SVI/netbird#1811