Jump to content
Not connected, Your IP: 3.128.226.128
Mamy

Eddie Error when restore firewall (nft) on disabling Network Lock

Recommended Posts

Hello,
I have two PC's with Debian 11 (KDE) both, using Eddie 2.21.8 on both, but used 2.21.6 on one before. On both PCs with both mentioned Eddie versions I have next problem:
When Network Lock is being enabled, it disables ufw and overrides nft (which is good and expected), but when I then disconnect from server and disable Network Lock (in Eddie with buttns), the ufw status stays inactive, and the notification in KDE plasma from Eddie appears with next message:
 

Exception: nft issue: exit:1; err:/tmp/eddie_tmp_netlock_nftables_backup.nft:231:43-50: Error: syntax error, unexpected hoplimit, expecting newline or semicolon
meta l4proto ipv6-icmp icmpv6 type ip6 hoplimit 255 counter packets 0 bytes 0 accept
^^^^^^^^
/tmp/eddie_tmp_netlock_nftables_backup.nft:232:43-50: Error: syntax error, unexpected hoplimit, expecting newline or semicolon
meta l4proto ipv6-icmp icmpv6 type ip6 hoplimit 255 counter packets 0 bytes 0 accept
^^^^^^^^
/tmp/eddie_tmp_netlock_nftables_backup.nft:233:59-65: Error: syntax error, unexpected counter
meta l4proto ipv6-icmp ip6 saddr fe80::/10 icmpv6 type counter packets 0 bytes 0 accept
^^^^^^^
/tmp/eddie_tmp_netlock_nftables_backup.nft:234:59-65: Error: syntax error, unexpected counter
meta l4proto ipv6-icmp ip6 saddr fe80::/10 icmpv6 type counter packets 0 bytes 0 accept
^^^^^^^
/tmp/eddie_tmp_netlock_nftables_backup.nft:235:59-65: Error: syntax error, unexpected counter
meta l4proto ipv6-icmp ip6 saddr fe80::/10 icmpv6 type counter packets 0 bytes 0 accept
^^^^^^^
/tmp/eddie_tmp_netlock_nftables_backup.nft:236:59-65: Error: syntax error, unexpected counter
meta l4proto ipv6-icmp ip6 saddr fe80::/10 icmpv6 type counter packets 0 bytes 0 accept
^^^^^^^
/tmp/eddie_tmp_netlock_nftables_backup.nft:237:43-50: Error: syntax error, unexpected hoplimit, expecting newline or semicolon
meta l4proto ipv6-icmp icmpv6 type ip6 hoplimit 255 counter packets 0 bytes 0 accept
^^^^^^^^
/tmp/eddie_tmp_netlock_nftables_backup.nft:238:43-50: Error: syntax error, unexpected hoplimit, expecting newline or semicolon
meta l4proto ipv6-icmp icmpv6 type ip6 hoplimit 255 counter packets 0 bytes 0 accept
^^^^^^^^
/tmp/eddie_tmp_netlock_nftables_backup.nft:239:63-70: Error: syntax error, unexpected hoplimit, expecting newline or semicolon
meta l4proto ipv6-icmp ip6 saddr fe80::/10 icmpv6 type ip6 hoplimit 1 counter packets 0 bytes 0 accept
^^^^^^^^
/tmp/eddie_tmp_netlock_nftables_backup.nft:240:63-70: Error: syntax error, unexpected hoplimit, expecting newline or semicolon
meta l4proto ipv6-icmp ip6 saddr fe80::/10 icmpv6 type ip6 hoplimit 1 counter packets 0 bytes 0 accept
^^^^^^^^


Eddie log has same lines as well. I'm also attaching the nftables backup file, that Eddie creates on Network lock enabling (to restore rules after disabling).
My system firewall settings are the most common ones. I do not know how to use nft, so I just install UFW right after I install Debian, and apply default rules:
sudo ufw default deny incoming
sudo ufw default allow outgoing
So I guess there is nothing unique in my firewall settings

Thought if you may have any ideas on how could I fix i, because I often use PC after disconnecting from AirVpn, and as long as Eddie does not restore firewall, my PC stays open for connections when I forget to enable firewall manually after closing Eddie.
Thank you

eddie_tmp_netlock_nftables_backup.nft

Share this post


Link to post
On 8/20/2022 at 11:43 PM, Mamy said:

Thought if you may have any ideas on how could I fix i, because I often use PC after disconnecting from AirVpn, and as long as Eddie does not restore firewall, my PC stays open for connections when I forget to enable firewall manually after closing Eddie.


It looks like something in the code and nothing you can do (unless you can code :D).
I think the devs need to check on that. Can you please open a ticket?

NOT AN AIRVPN TEAM MEMBER. USE TICKETS FOR PROFESSIONAL SUPPORT.

LZ1's New User Guide to AirVPN « Plenty of stuff for advanced users, too!

Want to contact me directly? All relevant methods are on my About me page.

Share this post


Link to post
2 hours ago, OpenSourcerer said:

I think the devs need to check on that. Can you please open a ticket?


Thank you for the reply!
Yes, sure I can.
Can I ask you what is the better way to do it - on GitHub of Eddie or somewhere on this forum, or somewhere else on AirVpn website?
Thank you

Share this post


Link to post
1 hour ago, Mamy said:

Can I ask you what is the better way to do it - on GitHub of Eddie or somewhere on this forum, or somewhere else on AirVpn website?


Oh, right, it can be a GitHub ticket, too… Contact Us button in the top right corner of the website. :)

NOT AN AIRVPN TEAM MEMBER. USE TICKETS FOR PROFESSIONAL SUPPORT.

LZ1's New User Guide to AirVPN « Plenty of stuff for advanced users, too!

Want to contact me directly? All relevant methods are on my About me page.

Share this post


Link to post

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

Loading...
  • Security Check
    Play CAPTCHA Audio
    Refresh Image

×
×
  • Create New...