Exception when closing Eddie (debian 10) - possibly nftables syntax

[swampdog 0]

Hi,

When I close Eddie (just clicking the x in the top-right), I get an exception: See log excerpt below

This happens with 2.19.7 and the new 2.20.0, but seems ok if iptables in 'network lock' is selected. Looks like it is an nftables issue.

. 2021.03.19 08:19:49 - Shutdown in progress
. 2021.03.19 08:19:51 - Deactivation of Network Lock
E 2021.03.19 08:19:51 - Exception: nft issue: exit:1; out:; err:/tmp/eddie_tmp_netlock_nftables_backup.nft:70:57-64: Error: syntax error, unexpected hoplimit, expecting newline or semicolon
E 2021.03.19 08:19:51 -     meta l4proto ipv6-icmp icmpv6 type  ip6 hoplimit 255 counter packets 0 bytes 0 accept
E 2021.03.19 08:19:51 -     ^^^^^^^^
E 2021.03.19 08:19:51 -     /tmp/eddie_tmp_netlock_nftables_backup.nft:71:57-64: Error: syntax error, unexpected hoplimit, expecting newline or semicolon
E 2021.03.19 08:19:51 -     meta l4proto ipv6-icmp icmpv6 type  ip6 hoplimit 255 counter packets 0 bytes 0 accept
E 2021.03.19 08:19:51 -     ^^^^^^^^
E 2021.03.19 08:19:51 -     /tmp/eddie_tmp_netlock_nftables_backup.nft:72:73-79: Error: syntax error, unexpected counter
E 2021.03.19 08:19:51 -     meta l4proto ipv6-icmp ip6 saddr fe80::/10 icmpv6 type  counter packets 0 bytes 0 accept
E 2021.03.19 08:19:51 -     ^^^^^^^
E 2021.03.19 08:19:51 -     /tmp/eddie_tmp_netlock_nftables_backup.nft:73:73-79: Error: syntax error, unexpected counter
E 2021.03.19 08:19:51 -     meta l4proto ipv6-icmp ip6 saddr fe80::/10 icmpv6 type  counter packets 0 bytes 0 accept
E 2021.03.19 08:19:51 -     ^^^^^^^
E 2021.03.19 08:19:51 -     /tmp/eddie_tmp_netlock_nftables_backup.nft:74:73-79: Error: syntax error, unexpected counter
E 2021.03.19 08:19:51 -     meta l4proto ipv6-icmp ip6 saddr fe80::/10 icmpv6 type  counter packets 0 bytes 0 accept
E 2021.03.19 08:19:51 -     ^^^^^^^
E 2021.03.19 08:19:51 -     /tmp/eddie_tmp_netlock_nftables_backup.nft:75:73-79: Error: syntax error, unexpected counter
E 2021.03.19 08:19:51 -     meta l4proto ipv6-icmp ip6 saddr fe80::/10 icmpv6 type  counter packets 0 bytes 0 accept
E 2021.03.19 08:19:51 -     ^^^^^^^
E 2021.03.19 08:19:51 -     /tmp/eddie_tmp_netlock_nftables_backup.nft:76:57-64: Error: syntax error, unexpected hoplimit, expecting newline or semicolon
E 2021.03.19 08:19:51 -     meta l4proto ipv6-icmp icmpv6 type  ip6 hoplimit 255 counter packets 0 bytes 0 accept
E 2021.03.19 08:19:51 -     ^^^^^^^^
E 2021.03.19 08:19:51 -     /tmp/eddie_tmp_netlock_nftables_backup.nft:77:57-64: Error: syntax error, unexpected hoplimit, expecting newline or semicolon
E 2021.03.19 08:19:51 -     meta l4proto ipv6-icmp icmpv6 type  ip6 hoplimit 255 counter packets 0 bytes 0 accept
E 2021.03.19 08:19:51 -     ^^^^^^^^
E 2021.03.19 08:19:51 -     /tmp/eddie_tmp_netlock_nftables_backup.nft:78:77-84: Error: syntax error, unexpected hoplimit, expecting newline or semicolon
E 2021.03.19 08:19:51 -     meta l4proto ipv6-icmp ip6 saddr fe80::/10 icmpv6 type  ip6 hoplimit 1 counter packets 0 bytes 0 accept
E 2021.03.19 08:19:51 -     ^^^^^^^^
E 2021.03.19 08:19:51 -     /tmp/eddie_tmp_netlock_nftables_backup.nft:79:77-84: Error: syntax error, unexpected hoplimit, expecting newline or semicolon
E 2021.03.19 08:19:51 -     meta l4proto ipv6-icmp ip6 saddr fe80::/10 icmpv6 type  ip6 hoplimit 1 counter packets 0 bytes 0 accept
E 2021.03.19 08:19:51 -     ^^^^^^^^
. 2021.03.19 08:19:51 - Shutdown complete
. 2021.03.19 08:19:53 - Issue with the tray icon: Thread was being aborted.

Thanks.

[cheezelikesthis 0]

Hello to all,

I am getting the same exception when I deactivate Network Lock.
My system is MX21 / Kernel 5.10.12 / Init: systemd / Debian 11 base code.

E 2021.03.19 08:19:51 - Exception: nft issue: exit:1; out:; err:/tmp/eddie_tmp_netlock_nftables_backup.nft:70:57-64: Error: syntax error, unexpected hoplimit, expecting newline or semicolon
E 2021.03.19 08:19:51 -     meta l4proto ipv6-icmp icmpv6 type  ip6 hoplimit 255 counter packets 0 bytes 0 accept

Checking UFW status shows "disabled" after deactivating Network Lock. It should show "enabled" when Network Lock is disabled assuming I have enabled UFW before running Eddie.


 

[OpenSourcerer 1360]

Cannot reproduce with 2.21.5 beta on Arch Linux. Activation and deactivation with both options, nftables and iptables-legacy, works as intended. Can you try that?

[cheeze 2]

Tried with 2.21.5 but had same issues.

The solution for me was to completely disable ufw and enable nftables at boot. Then set my default firewall rules as I like using only nftables.
Now, eddie ver 2.20.0 works as expected.