Mamy 0 Posted ... Hello, I have two PC's with Debian 11 (KDE) both, using Eddie 2.21.8 on both, but used 2.21.6 on one before. On both PCs with both mentioned Eddie versions I have next problem: When Network Lock is being enabled, it disables ufw and overrides nft (which is good and expected), but when I then disconnect from server and disable Network Lock (in Eddie with buttns), the ufw status stays inactive, and the notification in KDE plasma from Eddie appears with next message: Exception: nft issue: exit:1; err:/tmp/eddie_tmp_netlock_nftables_backup.nft:231:43-50: Error: syntax error, unexpected hoplimit, expecting newline or semicolon meta l4proto ipv6-icmp icmpv6 type ip6 hoplimit 255 counter packets 0 bytes 0 accept ^^^^^^^^ /tmp/eddie_tmp_netlock_nftables_backup.nft:232:43-50: Error: syntax error, unexpected hoplimit, expecting newline or semicolon meta l4proto ipv6-icmp icmpv6 type ip6 hoplimit 255 counter packets 0 bytes 0 accept ^^^^^^^^ /tmp/eddie_tmp_netlock_nftables_backup.nft:233:59-65: Error: syntax error, unexpected counter meta l4proto ipv6-icmp ip6 saddr fe80::/10 icmpv6 type counter packets 0 bytes 0 accept ^^^^^^^ /tmp/eddie_tmp_netlock_nftables_backup.nft:234:59-65: Error: syntax error, unexpected counter meta l4proto ipv6-icmp ip6 saddr fe80::/10 icmpv6 type counter packets 0 bytes 0 accept ^^^^^^^ /tmp/eddie_tmp_netlock_nftables_backup.nft:235:59-65: Error: syntax error, unexpected counter meta l4proto ipv6-icmp ip6 saddr fe80::/10 icmpv6 type counter packets 0 bytes 0 accept ^^^^^^^ /tmp/eddie_tmp_netlock_nftables_backup.nft:236:59-65: Error: syntax error, unexpected counter meta l4proto ipv6-icmp ip6 saddr fe80::/10 icmpv6 type counter packets 0 bytes 0 accept ^^^^^^^ /tmp/eddie_tmp_netlock_nftables_backup.nft:237:43-50: Error: syntax error, unexpected hoplimit, expecting newline or semicolon meta l4proto ipv6-icmp icmpv6 type ip6 hoplimit 255 counter packets 0 bytes 0 accept ^^^^^^^^ /tmp/eddie_tmp_netlock_nftables_backup.nft:238:43-50: Error: syntax error, unexpected hoplimit, expecting newline or semicolon meta l4proto ipv6-icmp icmpv6 type ip6 hoplimit 255 counter packets 0 bytes 0 accept ^^^^^^^^ /tmp/eddie_tmp_netlock_nftables_backup.nft:239:63-70: Error: syntax error, unexpected hoplimit, expecting newline or semicolon meta l4proto ipv6-icmp ip6 saddr fe80::/10 icmpv6 type ip6 hoplimit 1 counter packets 0 bytes 0 accept ^^^^^^^^ /tmp/eddie_tmp_netlock_nftables_backup.nft:240:63-70: Error: syntax error, unexpected hoplimit, expecting newline or semicolon meta l4proto ipv6-icmp ip6 saddr fe80::/10 icmpv6 type ip6 hoplimit 1 counter packets 0 bytes 0 accept ^^^^^^^^ Eddie log has same lines as well. I'm also attaching the nftables backup file, that Eddie creates on Network lock enabling (to restore rules after disabling). My system firewall settings are the most common ones. I do not know how to use nft, so I just install UFW right after I install Debian, and apply default rules: sudo ufw default deny incoming sudo ufw default allow outgoing So I guess there is nothing unique in my firewall settings Thought if you may have any ideas on how could I fix i, because I often use PC after disconnecting from AirVpn, and as long as Eddie does not restore firewall, my PC stays open for connections when I forget to enable firewall manually after closing Eddie. Thank you eddie_tmp_netlock_nftables_backup.nft Quote Share this post Link to post
OpenSourcerer 1435 Posted ... On 8/20/2022 at 11:43 PM, Mamy said: Thought if you may have any ideas on how could I fix i, because I often use PC after disconnecting from AirVpn, and as long as Eddie does not restore firewall, my PC stays open for connections when I forget to enable firewall manually after closing Eddie. It looks like something in the code and nothing you can do (unless you can code :D). I think the devs need to check on that. Can you please open a ticket? Quote Hide OpenSourcerer's signature Hide all signatures NOT AN AIRVPN TEAM MEMBER. USE TICKETS FOR PROFESSIONAL SUPPORT. LZ1's New User Guide to AirVPN « Plenty of stuff for advanced users, too! Want to contact me directly? All relevant methods are on my About me page. Share this post Link to post
Mamy 0 Posted ... 2 hours ago, OpenSourcerer said: I think the devs need to check on that. Can you please open a ticket? Thank you for the reply! Yes, sure I can. Can I ask you what is the better way to do it - on GitHub of Eddie or somewhere on this forum, or somewhere else on AirVpn website? Thank you Quote Share this post Link to post
OpenSourcerer 1435 Posted ... 1 hour ago, Mamy said: Can I ask you what is the better way to do it - on GitHub of Eddie or somewhere on this forum, or somewhere else on AirVpn website? Oh, right, it can be a GitHub ticket, too… Contact Us button in the top right corner of the website. 1 Mamy reacted to this Quote Hide OpenSourcerer's signature Hide all signatures NOT AN AIRVPN TEAM MEMBER. USE TICKETS FOR PROFESSIONAL SUPPORT. LZ1's New User Guide to AirVPN « Plenty of stuff for advanced users, too! Want to contact me directly? All relevant methods are on my About me page. Share this post Link to post