How to build a specific version?

[dekiesel]

I downloaded the source for 3.17, but mage throws an error because the source isn't in a git repo?

I'd like to build an earlier version since allowlisting doesn't work atm.

me@pc:~/compile/nordvpn/nordvpn-linux-3.17.4$ mage build:debDocker
+ source /home/me/compile/nordvpn/nordvpn-linux-3.17.4/ci/env.sh
++ set -euxo pipefail
++ grep docker /proc/self/cgroup
++ '[' 0::/user.slice/user-1000.slice/[email protected]/app.slice/vte-spawn-b33e8841-6940-4bf2-815d-cc9e72c310fe.scope == 0::/ ']'
++ NAME=nordvpn
++ export NAME
++ COVERDIR=covdatafiles
++ export COVERDIR
+++ git rev-parse --short HEAD
fatal: not a git repository (or any of the parent directories): .git
++ HASH=
Error: running "ci/data.sh " failed with exit code 128

[mariusSincovici]

Hi,

The normal flow to build a specific version is to build using the git tag for it.
Regarding the error, could you try to run the git command in your folder to see if it works (git rev-parse --short HEAD)? Did you've downloaded the zip/tar file with the source code?

The version 3.17 is a quite old one and it uses old version also for the VPN libraries. This can have security issues or other vulnerabilities that were fixed in newer releases.

Regarding the issues with the allowlist, could you let us know what is the problem? Maybe we can investigate it and provide a fix in a newer application version.

Thanks

[dekiesel]

Thanks for your message!

Regarding the issues with the allowlist, could you let us know what is the problem? Maybe we can investigate it and provide a fix in a newer application version.

Since updating to 3.20.0 I can't ssh into the machine running nordvpn anylonger while nordvpn is connected. I assumed since this already happened in 3.18.0 that it's equally likely that I am just missing some other (newer) settings so I wanted to downgrade.

These are my nordvpn settings on the, let's call it nordvpn-server:

Technology: NORDLYNX
Firewall: enabled
Firewall Mark: 0xe1f1
Routing: enabled
Analytics: disabled
Kill Switch: enabled
Threat Protection Lite: disabled
Notify: enabled
Tray: enabled
Auto-connect: disabled
IPv6: disabled
Meshnet: disabled
DNS: disabled
LAN Discovery: disabled
Virtual Location: enabled
Post-quantum VPN: disabled
Allowlisted ports:
           22 (UDP|TCP)
         8076 (UDP|TCP)
         8086 (UDP|TCP)
         8096 (UDP|TCP)
  8265 - 8266 (UDP|TCP)
Allowlisted subnets:
	10.1.101.0/24
	10.1.100.0/24
	172.17.0.1/16

10.1.100.115 is the IP of the machine trying to connect to nordvpn-server. These settings worked fine on 3.16.x, but they don't work anymore. Turning on lan-discovery doesn't make it work either.

No connection:

$ nordvpn status
Status: Disconnected
$ sudo iptables -S
-P INPUT ACCEPT
-P FORWARD ACCEPT
-P OUTPUT ACCEPT
-A INPUT -i eno1 -p udp -m udp --dport 8265:8266 -m comment --comment nordvpn -j ACCEPT
-A INPUT -i eno1 -p udp -m udp --sport 8265:8266 -m comment --comment nordvpn -j ACCEPT
-A INPUT -i eno1 -p udp -m udp --dport 8096 -m comment --comment nordvpn -j ACCEPT
-A INPUT -i eno1 -p udp -m udp --sport 8096 -m comment --comment nordvpn -j ACCEPT
-A INPUT -i eno1 -p udp -m udp --dport 8086 -m comment --comment nordvpn -j ACCEPT
-A INPUT -i eno1 -p udp -m udp --sport 8086 -m comment --comment nordvpn -j ACCEPT
-A INPUT -i eno1 -p udp -m udp --dport 8076 -m comment --comment nordvpn -j ACCEPT
-A INPUT -i eno1 -p udp -m udp --sport 8076 -m comment --comment nordvpn -j ACCEPT
-A INPUT -i eno1 -p udp -m udp --dport 22 -m comment --comment nordvpn -j ACCEPT
-A INPUT -i eno1 -p udp -m udp --sport 22 -m comment --comment nordvpn -j ACCEPT
-A INPUT -i eno1 -p tcp -m tcp --dport 8265:8266 -m comment --comment nordvpn -j ACCEPT
-A INPUT -i eno1 -p tcp -m tcp --sport 8265:8266 -m comment --comment nordvpn -j ACCEPT
-A INPUT -i eno1 -p tcp -m tcp --dport 8096 -m comment --comment nordvpn -j ACCEPT
-A INPUT -i eno1 -p tcp -m tcp --sport 8096 -m comment --comment nordvpn -j ACCEPT
-A INPUT -i eno1 -p tcp -m tcp --dport 8086 -m comment --comment nordvpn -j ACCEPT
-A INPUT -i eno1 -p tcp -m tcp --sport 8086 -m comment --comment nordvpn -j ACCEPT
-A INPUT -i eno1 -p tcp -m tcp --dport 8076 -m comment --comment nordvpn -j ACCEPT
-A INPUT -i eno1 -p tcp -m tcp --sport 8076 -m comment --comment nordvpn -j ACCEPT
-A INPUT -i eno1 -p tcp -m tcp --dport 22 -m comment --comment nordvpn -j ACCEPT
-A INPUT -i eno1 -p tcp -m tcp --sport 22 -m comment --comment nordvpn -j ACCEPT
-A INPUT -s 172.17.0.0/16 -i eno1 -m comment --comment nordvpn -j ACCEPT
-A INPUT -s 10.1.100.0/24 -i eno1 -m comment --comment nordvpn -j ACCEPT
-A INPUT -s 10.1.101.0/24 -i eno1 -m comment --comment nordvpn -j ACCEPT
-A INPUT -i eno1 -m connmark --mark 0xe1f1 -m comment --comment nordvpn -j ACCEPT
-A INPUT -i eno1 -m comment --comment nordvpn -j DROP
-A FORWARD -d 172.17.0.0/16 -o eno1 -m comment --comment nordvpn -j ACCEPT
-A FORWARD -d 10.1.100.0/24 -o eno1 -m comment --comment nordvpn -j ACCEPT
-A FORWARD -d 10.1.101.0/24 -o eno1 -m comment --comment nordvpn -j ACCEPT
-A FORWARD -o eno1 -m comment --comment nordvpn -j DROP
-A OUTPUT -d 169.254.0.0/16 -p tcp -m tcp --dport 53 -m comment --comment nordvpn -j DROP
-A OUTPUT -d 169.254.0.0/16 -p udp -m udp --dport 53 -m comment --comment nordvpn -j DROP
-A OUTPUT -d 192.168.0.0/16 -p tcp -m tcp --dport 53 -m comment --comment nordvpn -j DROP
-A OUTPUT -d 192.168.0.0/16 -p udp -m udp --dport 53 -m comment --comment nordvpn -j DROP
-A OUTPUT -d 172.16.0.0/12 -p tcp -m tcp --dport 53 -m comment --comment nordvpn -j DROP
-A OUTPUT -d 172.16.0.0/12 -p udp -m udp --dport 53 -m comment --comment nordvpn -j DROP
-A OUTPUT -d 10.0.0.0/8 -p tcp -m tcp --dport 53 -m comment --comment nordvpn -j DROP
-A OUTPUT -d 10.0.0.0/8 -p udp -m udp --dport 53 -m comment --comment nordvpn -j DROP
-A OUTPUT -o eno1 -p udp -m udp --dport 8265:8266 -m comment --comment nordvpn -j ACCEPT
-A OUTPUT -o eno1 -p udp -m udp --sport 8265:8266 -m comment --comment nordvpn -j ACCEPT
-A OUTPUT -o eno1 -p udp -m udp --dport 8096 -m comment --comment nordvpn -j ACCEPT
-A OUTPUT -o eno1 -p udp -m udp --sport 8096 -m comment --comment nordvpn -j ACCEPT
-A OUTPUT -o eno1 -p udp -m udp --dport 8086 -m comment --comment nordvpn -j ACCEPT
-A OUTPUT -o eno1 -p udp -m udp --sport 8086 -m comment --comment nordvpn -j ACCEPT
-A OUTPUT -o eno1 -p udp -m udp --dport 8076 -m comment --comment nordvpn -j ACCEPT
-A OUTPUT -o eno1 -p udp -m udp --sport 8076 -m comment --comment nordvpn -j ACCEPT
-A OUTPUT -o eno1 -p udp -m udp --dport 22 -m comment --comment nordvpn -j ACCEPT
-A OUTPUT -o eno1 -p udp -m udp --sport 22 -m comment --comment nordvpn -j ACCEPT
-A OUTPUT -o eno1 -p tcp -m tcp --dport 8265:8266 -m comment --comment nordvpn -j ACCEPT
-A OUTPUT -o eno1 -p tcp -m tcp --sport 8265:8266 -m comment --comment nordvpn -j ACCEPT
-A OUTPUT -o eno1 -p tcp -m tcp --dport 8096 -m comment --comment nordvpn -j ACCEPT
-A OUTPUT -o eno1 -p tcp -m tcp --sport 8096 -m comment --comment nordvpn -j ACCEPT
-A OUTPUT -o eno1 -p tcp -m tcp --dport 8086 -m comment --comment nordvpn -j ACCEPT
-A OUTPUT -o eno1 -p tcp -m tcp --sport 8086 -m comment --comment nordvpn -j ACCEPT
-A OUTPUT -o eno1 -p tcp -m tcp --dport 8076 -m comment --comment nordvpn -j ACCEPT
-A OUTPUT -o eno1 -p tcp -m tcp --sport 8076 -m comment --comment nordvpn -j ACCEPT
-A OUTPUT -o eno1 -p tcp -m tcp --dport 22 -m comment --comment nordvpn -j ACCEPT
-A OUTPUT -o eno1 -p tcp -m tcp --sport 22 -m comment --comment nordvpn -j ACCEPT
-A OUTPUT -d 172.17.0.0/16 -o eno1 -m comment --comment nordvpn -j ACCEPT
-A OUTPUT -d 10.1.100.0/24 -o eno1 -m comment --comment nordvpn -j ACCEPT
-A OUTPUT -d 10.1.101.0/24 -o eno1 -m comment --comment nordvpn -j ACCEPT
-A OUTPUT -o eno1 -m mark --mark 0xe1f1 -m comment --comment nordvpn -j CONNMARK --save-mark --nfmask 0xffffffff --ctmask 0xffffffff
-A OUTPUT -o eno1 -m connmark --mark 0xe1f1 -m comment --comment nordvpn -j ACCEPT
-A OUTPUT -o eno1 -m comment --comment nordvpn -j DROP

When there is a connection:

Status: Connected
Server: Germany #1143
Hostname: de1143.nordvpn.com
IP: 212.23.215.4
Country: Germany
City: Frankfurt
Current technology: NORDLYNX
Current protocol: UDP
Post-quantum VPN: Disabled
Transfer: 0.60 GiB received, 27.41 MiB sent
Uptime: 57 seconds
-P INPUT ACCEPT
-P FORWARD ACCEPT
-P OUTPUT ACCEPT
-A INPUT -i eno1 -p udp -m udp --dport 8265:8266 -m comment --comment nordvpn -j ACCEPT
-A INPUT -i eno1 -p udp -m udp --sport 8265:8266 -m comment --comment nordvpn -j ACCEPT
-A INPUT -i eno1 -p udp -m udp --dport 8096 -m comment --comment nordvpn -j ACCEPT
-A INPUT -i eno1 -p udp -m udp --sport 8096 -m comment --comment nordvpn -j ACCEPT
-A INPUT -i eno1 -p udp -m udp --dport 8086 -m comment --comment nordvpn -j ACCEPT
-A INPUT -i eno1 -p udp -m udp --sport 8086 -m comment --comment nordvpn -j ACCEPT
-A INPUT -i eno1 -p udp -m udp --dport 8076 -m comment --comment nordvpn -j ACCEPT
-A INPUT -i eno1 -p udp -m udp --sport 8076 -m comment --comment nordvpn -j ACCEPT
-A INPUT -i eno1 -p udp -m udp --dport 22 -m comment --comment nordvpn -j ACCEPT
-A INPUT -i eno1 -p udp -m udp --sport 22 -m comment --comment nordvpn -j ACCEPT
-A INPUT -i eno1 -p tcp -m tcp --dport 8265:8266 -m comment --comment nordvpn -j ACCEPT
-A INPUT -i eno1 -p tcp -m tcp --sport 8265:8266 -m comment --comment nordvpn -j ACCEPT
-A INPUT -i eno1 -p tcp -m tcp --dport 8096 -m comment --comment nordvpn -j ACCEPT
-A INPUT -i eno1 -p tcp -m tcp --sport 8096 -m comment --comment nordvpn -j ACCEPT
-A INPUT -i eno1 -p tcp -m tcp --dport 8086 -m comment --comment nordvpn -j ACCEPT
-A INPUT -i eno1 -p tcp -m tcp --sport 8086 -m comment --comment nordvpn -j ACCEPT
-A INPUT -i eno1 -p tcp -m tcp --dport 8076 -m comment --comment nordvpn -j ACCEPT
-A INPUT -i eno1 -p tcp -m tcp --sport 8076 -m comment --comment nordvpn -j ACCEPT
-A INPUT -i eno1 -p tcp -m tcp --dport 22 -m comment --comment nordvpn -j ACCEPT
-A INPUT -i eno1 -p tcp -m tcp --sport 22 -m comment --comment nordvpn -j ACCEPT
-A INPUT -s 172.17.0.0/16 -i eno1 -m comment --comment nordvpn -j ACCEPT
-A INPUT -s 10.1.100.0/24 -i eno1 -m comment --comment nordvpn -j ACCEPT
-A INPUT -s 10.1.101.0/24 -i eno1 -m comment --comment nordvpn -j ACCEPT
-A INPUT -i eno1 -m connmark --mark 0xe1f1 -m comment --comment nordvpn -j ACCEPT
-A INPUT -i eno1 -m comment --comment nordvpn -j DROP
-A FORWARD -d 172.17.0.0/16 -o eno1 -m comment --comment nordvpn -j ACCEPT
-A FORWARD -d 10.1.100.0/24 -o eno1 -m comment --comment nordvpn -j ACCEPT
-A FORWARD -d 10.1.101.0/24 -o eno1 -m comment --comment nordvpn -j ACCEPT
-A FORWARD -o eno1 -m comment --comment nordvpn -j DROP
-A OUTPUT -d 169.254.0.0/16 -p tcp -m tcp --dport 53 -m comment --comment nordvpn -j DROP
-A OUTPUT -d 169.254.0.0/16 -p udp -m udp --dport 53 -m comment --comment nordvpn -j DROP
-A OUTPUT -d 192.168.0.0/16 -p tcp -m tcp --dport 53 -m comment --comment nordvpn -j DROP
-A OUTPUT -d 192.168.0.0/16 -p udp -m udp --dport 53 -m comment --comment nordvpn -j DROP
-A OUTPUT -d 172.16.0.0/12 -p tcp -m tcp --dport 53 -m comment --comment nordvpn -j DROP
-A OUTPUT -d 172.16.0.0/12 -p udp -m udp --dport 53 -m comment --comment nordvpn -j DROP
-A OUTPUT -d 10.0.0.0/8 -p tcp -m tcp --dport 53 -m comment --comment nordvpn -j DROP
-A OUTPUT -d 10.0.0.0/8 -p udp -m udp --dport 53 -m comment --comment nordvpn -j DROP
-A OUTPUT -o eno1 -p udp -m udp --dport 8265:8266 -m comment --comment nordvpn -j ACCEPT
-A OUTPUT -o eno1 -p udp -m udp --sport 8265:8266 -m comment --comment nordvpn -j ACCEPT
-A OUTPUT -o eno1 -p udp -m udp --dport 8096 -m comment --comment nordvpn -j ACCEPT
-A OUTPUT -o eno1 -p udp -m udp --sport 8096 -m comment --comment nordvpn -j ACCEPT
-A OUTPUT -o eno1 -p udp -m udp --dport 8086 -m comment --comment nordvpn -j ACCEPT
-A OUTPUT -o eno1 -p udp -m udp --sport 8086 -m comment --comment nordvpn -j ACCEPT
-A OUTPUT -o eno1 -p udp -m udp --dport 8076 -m comment --comment nordvpn -j ACCEPT
-A OUTPUT -o eno1 -p udp -m udp --sport 8076 -m comment --comment nordvpn -j ACCEPT
-A OUTPUT -o eno1 -p udp -m udp --dport 22 -m comment --comment nordvpn -j ACCEPT
-A OUTPUT -o eno1 -p udp -m udp --sport 22 -m comment --comment nordvpn -j ACCEPT
-A OUTPUT -o eno1 -p tcp -m tcp --dport 8265:8266 -m comment --comment nordvpn -j ACCEPT
-A OUTPUT -o eno1 -p tcp -m tcp --sport 8265:8266 -m comment --comment nordvpn -j ACCEPT
-A OUTPUT -o eno1 -p tcp -m tcp --dport 8096 -m comment --comment nordvpn -j ACCEPT
-A OUTPUT -o eno1 -p tcp -m tcp --sport 8096 -m comment --comment nordvpn -j ACCEPT
-A OUTPUT -o eno1 -p tcp -m tcp --dport 8086 -m comment --comment nordvpn -j ACCEPT
-A OUTPUT -o eno1 -p tcp -m tcp --sport 8086 -m comment --comment nordvpn -j ACCEPT
-A OUTPUT -o eno1 -p tcp -m tcp --dport 8076 -m comment --comment nordvpn -j ACCEPT
-A OUTPUT -o eno1 -p tcp -m tcp --sport 8076 -m comment --comment nordvpn -j ACCEPT
-A OUTPUT -o eno1 -p tcp -m tcp --dport 22 -m comment --comment nordvpn -j ACCEPT
-A OUTPUT -o eno1 -p tcp -m tcp --sport 22 -m comment --comment nordvpn -j ACCEPT
-A OUTPUT -d 172.17.0.0/16 -o eno1 -m comment --comment nordvpn -j ACCEPT
-A OUTPUT -d 10.1.100.0/24 -o eno1 -m comment --comment nordvpn -j ACCEPT
-A OUTPUT -d 10.1.101.0/24 -o eno1 -m comment --comment nordvpn -j ACCEPT
-A OUTPUT -o eno1 -m mark --mark 0xe1f1 -m comment --comment nordvpn -j CONNMARK --save-mark --nfmask 0xffffffff --ctmask 0xffffffff
-A OUTPUT -o eno1 -m connmark --mark 0xe1f1 -m comment --comment nordvpn -j ACCEPT
-A OUTPUT -o eno1 -m comment --comment nordvpn -j DROP

It's interesting that the rules seem to be the same, whether the vpn is off or not, but I don't know enough about iptables to know whether this is normal.

Running this on Ubuntu 24.04.2.

If this indeed is a bug and I should turn it into an issue please let me know!

[mariusSincovici]

Hi,

Regarding iptables, it is very strange that you see any rules when you're not connected to VPN having --comment nordvpn. Is this also happening with 3.20? Because with older version, if the application crashes, some rules can remain in the system, but in newer versions this was fixed. I would suggest to reboot the machine or flush the iptables. For reboot check afterwards that rules are deleted before connecting to VPN. If it still reproduces with 3.19.2 or 3.20 please let me know.

Related to the SSH connection, if it works fine when your not connected to VPN, but the NordVPN rules are in the system, that means the routing table is the one causing problems for you and not the firewall/iptables. With 3.20.0 version you are probably affected by this bug since your LAN is in 10/8 range. There are some suggestions for a workaround or downgrade to version 3.19.2, until a proper fix is made.

Let me know if you need more help.

[dekiesel]

Hi, apologies for the delay:

$ uname -a
Linux htpc 6.8.0-55-generic #57-Ubuntu SMP PREEMPT_DYNAMIC Wed Feb 12 23:42:21 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux
$ iptables --version
iptables v1.8.10 (nf_tables)
$ lsb_release -a
No LSB modules are available.
Distributor ID:	Ubuntu
Description:	Ubuntu 24.04.2 LTS
Release:	24.04
Codename:	noble

I started nordvpn nordvpn c, ran the command to capture the logs and then in another shell ran nordvpn d.

daemon.log:

Mar 20 17:00:01 mypc systemd-resolved[1053]: nordlynx: Bus client set DNS server list to: 103.86.96.100, 103.86.99.100
Mar 20 17:00:01 mypc systemd-resolved[1053]: nordlynx: Bus client set search domain list to: ~.
Mar 20 17:00:01 mypc systemd-resolved[1053]: nordlynx: Bus client set default route setting: yes
Mar 20 17:00:01 mypc systemd-resolved[1053]: nordlynx: Bus client set DNSSEC setting: allow-downgrade
Mar 20 17:00:01 mypc systemd-resolved[1053]: eno1: Bus client reset search domain list.
Mar 20 17:00:01 mypc systemd-resolved[1053]: Flushed all caches.
Mar 20 17:00:30 mypc systemd-resolved[1053]: Flushed all caches.

[mariusSincovici]

Hi,
Thanks for the infos,
Unfortunately I've sent the wrong command to capture the logs sudo journalctl -u nordvpnd.service -f > daemon.log.

Strange with iptables, I'm using the same Ubuntu/iptables versions, but I cannot reproduce.
Also just for info, there is a new app release, but it will not solve your LAN bug, so don't update.

[dekiesel]

Mar 21 12:58:30 mypc nordvpnd[1093]: -P INPUT ACCEPT
Mar 21 12:58:30 mypc nordvpnd[1093]: -P FORWARD ACCEPT
Mar 21 12:58:30 mypc nordvpnd[1093]: -P OUTPUT ACCEPT
Mar 21 12:58:30 mypc nordvpnd[1093]: IP tables for ipv6:
Mar 21 12:58:30 mypc nordvpnd[1093]: 2025/03/21 12:58:30 [Debug] notifying about disconnect event: {Protocol:UNKNOWN_PROTOCOL ServerFromAPI:false EventStatus:0 Technology:UNKNOWN_TECHNOLOGY TargetServerSelection: ThreatProtectionLite:false ByUser:true}
Mar 21 12:59:01 mypc nordvpnd[1093]: 2025/03/21 12:59:01 [Info] [NC] Connected
Mar 21 12:59:02 mypc nordvpnd[1093]: 2025/03/21 12:59:02 [NC] Connected
Mar 21 13:00:43 mypc nordvpnd[1093]: 2025/03/21 13:00:43 [Debug] 2 active user processes found
Mar 21 13:01:06 mypc nordvpnd[1093]: 2025/03/21 13:01:06 [Debug] 3 active user processes found
Mar 21 13:01:36 mypc nordvpnd[1093]: 2025/03/21 13:01:36 [Debug] 4 active user processes found
Mar 21 13:01:40 mypc nordvpnd[1093]: 2025/03/21 13:01:40 [Info] stopping network configuration
Mar 21 13:01:40 mypc nordvpnd[1093]: 2025/03/21 13:01:40 [Info] unsetting DNS
Mar 21 13:01:40 mypc nordvpnd[1093]: 2025/03/21 13:01:40 [Info] unset dns for interface [nordlynx] using: resolved
Mar 21 13:01:40 mypc nordvpnd[1093]: 2025/03/21 13:01:40 [Info] removing route to tunnel
Mar 21 13:01:40 mypc nordvpnd[1093]: 2025/03/21 13:01:40 [Warning] removing suppress prefix rule: address family not supported by protocol
Mar 21 13:01:40 mypc nordvpnd[1093]: 2025/03/21 13:01:40 [Warning] removing fwmark rule: address family not supported by protocol
Mar 21 13:01:40 mypc nordvpnd[1093]: 2025/03/21 13:01:40 [Error] removing allow subnet rule: no such file or directory
Mar 21 13:01:40 mypc nordvpnd[1093]: 2025/03/21 13:01:40 [Error] removing allow subnet rule: no such file or directory
Mar 21 13:01:40 mypc nordvpnd[1093]: 2025/03/21 13:01:40 [Error] removing allow subnet rule: no such file or directory
Mar 21 13:01:40 mypc nordvpnd[1093]: 2025/03/21 13:01:40 [Info] removing route to the vpn server
Mar 21 13:01:40 mypc nordvpnd[1093]: 2025/03/21 13:01:40 [Info] stopping vpn
Mar 21 13:01:40 mypc nordvpnd[1093]: 2025/03/21 13:01:40 [Info] TELIO(v5.0.3): "telio::ffi":706 Telio::disconnect_from_exit_nodes entry with instance id: 5539611879661956036.
Mar 21 13:01:40 mypc nordvpnd[1093]: 2025/03/21 13:01:40 [Info] TELIO(v5.0.3): "telio::device::wg_controller":209 Removing peer: Peer { public_key: "m0te...jSs=", endpoint: Some(IP4(09dd3300320444e2):51820), endpoint_changed_at: Some(Instant { tv_sec: 43, tv_nsec: 58703850 }), ip_addresses: [IP4(3c2f8103d8aba68b), IP4(d2d5302925e0e2fb)], persistent_keepalive_interval: Some(25), allowed_ips: [IP4(5ab1f44669a7d5d8)/0], rx_bytes: Some(1637495972), time_since_last_rx: Some(561ns), tx_bytes: Some(85370440), time_since_last_handshake: Some(73.918495901s), preshared_key: None }
Mar 21 13:01:40 mypc nordvpnd[1093]: 2025/03/21 13:01:40 [Info] TELIO(v5.0.3): "telio::ffi":445 Telio::stop entry with instance id: 5539611879661956036.
Mar 21 13:01:40 mypc nordvpnd[1093]: task stopped - Telio
Mar 21 13:01:40 mypc nordvpnd[1093]: 2025/03/21 13:01:40 [Info] received event telio.EventNode: {"Body":{"Identifier":"797ce75f-31d8-49cd-90e6-68546842b62e","PublicKey":"***","Nickname":null,"State":1,"LinkState":1,"IsExit":true,"IsVpn":true,"IpAddresses":["10.5.0.1","100.64.0.1"],"AllowedIps":["0.0.0.0/0"],"Endpoint":"37.120.197.51:51820","Hostname":null,"AllowIncomingConnections":false,"AllowPeerSendFiles":false,"Path":2,"AllowMulticast":false,"PeerAllowsMulticast":false}}
Mar 21 13:01:40 mypc nordvpnd[1093]: 2025/03/21 13:01:40 [Info] TELIO(v5.0.3): "telio_nurse::nurse":251 Attempting to send moose disconnect event ...
Mar 21 13:01:40 mypc nordvpnd[1093]: 2025/03/21 13:01:40 [Info] TELIO(v5.0.3): "telio_nurse::nurse":294 Moose disconnect event result: Ok(Success)
Mar 21 13:01:40 mypc nordvpnd[1093]: 2025/03/21 13:01:40 [Info] TELIO(v5.0.3): "telio_nurse::nurse":378 Flushing moose changes result: Ok(Success)
Mar 21 13:01:40 mypc nordvpnd[1093]: task stopped - Nurse
Mar 21 13:01:40 mypc nordvpnd[1093]: task stopped - Nurse Heartbeat Analytics
Mar 21 13:01:40 mypc nordvpnd[1093]: task stopped - Nurse QoS Analytics
Mar 21 13:01:40 mypc nordvpnd[1093]: task stopped - Wg

Thanks for the heads up regarding the release! :)

[mariusSincovici]

I don't see anything special. The reported "errors" have no impacting the cleanup for iptables.

Here I see that there is nothing printed that exists into the system iptables. Did you by any chance deleted something from the log?

Mar 21 12:58:30 mypc nordvpnd[1093]: -P INPUT ACCEPT
Mar 21 12:58:30 mypc nordvpnd[1093]: -P FORWARD ACCEPT
Mar 21 12:58:30 mypc nordvpnd[1093]: -P OUTPUT ACCEPT

Could you try to run the following command and see that the rules are gone and then the app correctly clears the at disconnect?

NV_RULES=$(sudo iptables -S | grep nordvpn)
                while IFS= read -r line; do
                        echo "$line"
                        RULE=$(echo $line | cut -d' ' -f2-)
                        sudo iptables -D `echo ${RULE}`
                done <<< "$NV_RULES"

Thanks

[dekiesel]

That deletes the rules, but they persist after disconnecting, unfortunately.

myuser@mypc:~$ NV_RULES=$(sudo iptables -S | grep nordvpn)
                while IFS= read -r line; do
                        echo "$line"
                        RULE=$(echo $line | cut -d' ' -f2-)
                        sudo iptables -D `echo ${RULE}`
                done <<< "$NV_RULES"
-A INPUT -i eno1 -p udp -m udp --dport 8265:8266 -m comment --comment nordvpn -j ACCEPT
-A INPUT -i eno1 -p udp -m udp --sport 8265:8266 -m comment --comment nordvpn -j ACCEPT
-A INPUT -i eno1 -p udp -m udp --dport 8096 -m comment --comment nordvpn -j ACCEPT
-A INPUT -i eno1 -p udp -m udp --sport 8096 -m comment --comment nordvpn -j ACCEPT
-A INPUT -i eno1 -p udp -m udp --dport 8086 -m comment --comment nordvpn -j ACCEPT
-A INPUT -i eno1 -p udp -m udp --sport 8086 -m comment --comment nordvpn -j ACCEPT
-A INPUT -i eno1 -p udp -m udp --dport 8076 -m comment --comment nordvpn -j ACCEPT
-A INPUT -i eno1 -p udp -m udp --sport 8076 -m comment --comment nordvpn -j ACCEPT
-A INPUT -i eno1 -p udp -m udp --dport 22 -m comment --comment nordvpn -j ACCEPT
-A INPUT -i eno1 -p udp -m udp --sport 22 -m comment --comment nordvpn -j ACCEPT
-A INPUT -i eno1 -p tcp -m tcp --dport 8265:8266 -m comment --comment nordvpn -j ACCEPT
-A INPUT -i eno1 -p tcp -m tcp --sport 8265:8266 -m comment --comment nordvpn -j ACCEPT
-A INPUT -i eno1 -p tcp -m tcp --dport 8096 -m comment --comment nordvpn -j ACCEPT
-A INPUT -i eno1 -p tcp -m tcp --sport 8096 -m comment --comment nordvpn -j ACCEPT
-A INPUT -i eno1 -p tcp -m tcp --dport 8086 -m comment --comment nordvpn -j ACCEPT
-A INPUT -i eno1 -p tcp -m tcp --sport 8086 -m comment --comment nordvpn -j ACCEPT
-A INPUT -i eno1 -p tcp -m tcp --dport 8076 -m comment --comment nordvpn -j ACCEPT
-A INPUT -i eno1 -p tcp -m tcp --sport 8076 -m comment --comment nordvpn -j ACCEPT
-A INPUT -i eno1 -p tcp -m tcp --dport 22 -m comment --comment nordvpn -j ACCEPT
-A INPUT -i eno1 -p tcp -m tcp --sport 22 -m comment --comment nordvpn -j ACCEPT
-A INPUT -s 10.1.103.102/32 -i eno1 -m comment --comment nordvpn -j ACCEPT
-A INPUT -s 10.1.101.0/24 -i eno1 -m comment --comment nordvpn -j ACCEPT
-A INPUT -s 172.17.0.0/16 -i eno1 -m comment --comment nordvpn -j ACCEPT
-A INPUT -s 10.1.100.0/24 -i eno1 -m comment --comment nordvpn -j ACCEPT
-A FORWARD -d 10.1.103.102/32 -o eno1 -m comment --comment nordvpn -j ACCEPT
-A FORWARD -d 10.1.101.0/24 -o eno1 -m comment --comment nordvpn -j ACCEPT
-A FORWARD -d 172.17.0.0/16 -o eno1 -m comment --comment nordvpn -j ACCEPT
-A FORWARD -d 10.1.100.0/24 -o eno1 -m comment --comment nordvpn -j ACCEPT
-A OUTPUT -d 169.254.0.0/16 -p tcp -m tcp --dport 53 -m comment --comment nordvpn -j DROP
-A OUTPUT -d 169.254.0.0/16 -p udp -m udp --dport 53 -m comment --comment nordvpn -j DROP
-A OUTPUT -d 192.168.0.0/16 -p tcp -m tcp --dport 53 -m comment --comment nordvpn -j DROP
-A OUTPUT -d 192.168.0.0/16 -p udp -m udp --dport 53 -m comment --comment nordvpn -j DROP
-A OUTPUT -d 172.16.0.0/12 -p tcp -m tcp --dport 53 -m comment --comment nordvpn -j DROP
-A OUTPUT -d 172.16.0.0/12 -p udp -m udp --dport 53 -m comment --comment nordvpn -j DROP
-A OUTPUT -d 10.0.0.0/8 -p tcp -m tcp --dport 53 -m comment --comment nordvpn -j DROP
-A OUTPUT -d 10.0.0.0/8 -p udp -m udp --dport 53 -m comment --comment nordvpn -j DROP
-A OUTPUT -o eno1 -p udp -m udp --dport 8265:8266 -m comment --comment nordvpn -j ACCEPT
-A OUTPUT -o eno1 -p udp -m udp --sport 8265:8266 -m comment --comment nordvpn -j ACCEPT
-A OUTPUT -o eno1 -p udp -m udp --dport 8096 -m comment --comment nordvpn -j ACCEPT
-A OUTPUT -o eno1 -p udp -m udp --sport 8096 -m comment --comment nordvpn -j ACCEPT
-A OUTPUT -o eno1 -p udp -m udp --dport 8086 -m comment --comment nordvpn -j ACCEPT
-A OUTPUT -o eno1 -p udp -m udp --sport 8086 -m comment --comment nordvpn -j ACCEPT
-A OUTPUT -o eno1 -p udp -m udp --dport 8076 -m comment --comment nordvpn -j ACCEPT
-A OUTPUT -o eno1 -p udp -m udp --sport 8076 -m comment --comment nordvpn -j ACCEPT
-A OUTPUT -o eno1 -p udp -m udp --dport 22 -m comment --comment nordvpn -j ACCEPT
-A OUTPUT -o eno1 -p udp -m udp --sport 22 -m comment --comment nordvpn -j ACCEPT
-A OUTPUT -o eno1 -p tcp -m tcp --dport 8265:8266 -m comment --comment nordvpn -j ACCEPT
-A OUTPUT -o eno1 -p tcp -m tcp --sport 8265:8266 -m comment --comment nordvpn -j ACCEPT
-A OUTPUT -o eno1 -p tcp -m tcp --dport 8096 -m comment --comment nordvpn -j ACCEPT
-A OUTPUT -o eno1 -p tcp -m tcp --sport 8096 -m comment --comment nordvpn -j ACCEPT
-A OUTPUT -o eno1 -p tcp -m tcp --dport 8086 -m comment --comment nordvpn -j ACCEPT
-A OUTPUT -o eno1 -p tcp -m tcp --sport 8086 -m comment --comment nordvpn -j ACCEPT
-A OUTPUT -o eno1 -p tcp -m tcp --dport 8076 -m comment --comment nordvpn -j ACCEPT
-A OUTPUT -o eno1 -p tcp -m tcp --sport 8076 -m comment --comment nordvpn -j ACCEPT
-A OUTPUT -o eno1 -p tcp -m tcp --dport 22 -m comment --comment nordvpn -j ACCEPT
-A OUTPUT -o eno1 -p tcp -m tcp --sport 22 -m comment --comment nordvpn -j ACCEPT
-A OUTPUT -d 10.1.103.102/32 -o eno1 -m comment --comment nordvpn -j ACCEPT
-A OUTPUT -d 10.1.101.0/24 -o eno1 -m comment --comment nordvpn -j ACCEPT
-A OUTPUT -d 172.17.0.0/16 -o eno1 -m comment --comment nordvpn -j ACCEPT
-A OUTPUT -d 10.1.100.0/24 -o eno1 -m comment --comment nordvpn -j ACCEPT
-----------------------------------------------------------------------------------------------------------------
myuser@mypc:~$ sudo iptables -S
-P INPUT ACCEPT
-P FORWARD DROP
-P OUTPUT ACCEPT
-N DOCKER
-N DOCKER-BRIDGE
-N DOCKER-CT
-N DOCKER-FORWARD
-N DOCKER-ISOLATION-STAGE-1
-N DOCKER-ISOLATION-STAGE-2
-N DOCKER-USER
-A FORWARD -j DOCKER-USER
-A FORWARD -j DOCKER-FORWARD
-A DOCKER -d 172.19.0.2/32 ! -i br-b5a5c19de523 -o br-b5a5c19de523 -p tcp -m tcp --dport 8096 -j ACCEPT
-A DOCKER -d 172.17.0.2/32 ! -i docker0 -o docker0 -p tcp -m tcp --dport 8266 -j ACCEPT
-A DOCKER -d 172.21.0.2/32 ! -i br-132dea6ad197 -o br-132dea6ad197 -p tcp -m tcp --dport 3003 -j ACCEPT
-A DOCKER -d 172.17.0.2/32 ! -i docker0 -o docker0 -p tcp -m tcp --dport 8265 -j ACCEPT
-A DOCKER ! -i br-054134011ae8 -o br-054134011ae8 -j DROP
-A DOCKER ! -i br-132dea6ad197 -o br-132dea6ad197 -j DROP
-A DOCKER ! -i br-5b4dad9447cb -o br-5b4dad9447cb -j DROP
-A DOCKER ! -i br-758bf40057d3 -o br-758bf40057d3 -j DROP
-A DOCKER ! -i br-b5a5c19de523 -o br-b5a5c19de523 -j DROP
-A DOCKER ! -i docker0 -o docker0 -j DROP
-A DOCKER-BRIDGE -o br-054134011ae8 -j DOCKER
-A DOCKER-BRIDGE -o br-132dea6ad197 -j DOCKER
-A DOCKER-BRIDGE -o br-5b4dad9447cb -j DOCKER
-A DOCKER-BRIDGE -o br-758bf40057d3 -j DOCKER
-A DOCKER-BRIDGE -o br-b5a5c19de523 -j DOCKER
-A DOCKER-BRIDGE -o docker0 -j DOCKER
-A DOCKER-CT -o br-054134011ae8 -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
-A DOCKER-CT -o br-132dea6ad197 -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
-A DOCKER-CT -o br-5b4dad9447cb -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
-A DOCKER-CT -o br-758bf40057d3 -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
-A DOCKER-CT -o br-b5a5c19de523 -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
-A DOCKER-CT -o docker0 -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
-A DOCKER-FORWARD -j DOCKER-CT
-A DOCKER-FORWARD -j DOCKER-ISOLATION-STAGE-1
-A DOCKER-FORWARD -j DOCKER-BRIDGE
-A DOCKER-FORWARD -i br-054134011ae8 -j ACCEPT
-A DOCKER-FORWARD -i br-132dea6ad197 -j ACCEPT
-A DOCKER-FORWARD -i br-5b4dad9447cb -j ACCEPT
-A DOCKER-FORWARD -i br-758bf40057d3 -j ACCEPT
-A DOCKER-FORWARD -i br-b5a5c19de523 -j ACCEPT
-A DOCKER-FORWARD -i docker0 -j ACCEPT
-A DOCKER-ISOLATION-STAGE-1 -i br-054134011ae8 ! -o br-054134011ae8 -j DOCKER-ISOLATION-STAGE-2
-A DOCKER-ISOLATION-STAGE-1 -i br-132dea6ad197 ! -o br-132dea6ad197 -j DOCKER-ISOLATION-STAGE-2
-A DOCKER-ISOLATION-STAGE-1 -i br-5b4dad9447cb ! -o br-5b4dad9447cb -j DOCKER-ISOLATION-STAGE-2
-A DOCKER-ISOLATION-STAGE-1 -i br-758bf40057d3 ! -o br-758bf40057d3 -j DOCKER-ISOLATION-STAGE-2
-A DOCKER-ISOLATION-STAGE-1 -i br-b5a5c19de523 ! -o br-b5a5c19de523 -j DOCKER-ISOLATION-STAGE-2
-A DOCKER-ISOLATION-STAGE-1 -i docker0 ! -o docker0 -j DOCKER-ISOLATION-STAGE-2
-A DOCKER-ISOLATION-STAGE-2 -o docker0 -j DROP
-A DOCKER-ISOLATION-STAGE-2 -o br-b5a5c19de523 -j DROP
-A DOCKER-ISOLATION-STAGE-2 -o br-758bf40057d3 -j DROP
-A DOCKER-ISOLATION-STAGE-2 -o br-5b4dad9447cb -j DROP
-A DOCKER-ISOLATION-STAGE-2 -o br-132dea6ad197 -j DROP
-A DOCKER-ISOLATION-STAGE-2 -o br-054134011ae8 -j DROP
-A DOCKER-USER -j RETURN
-----------------------------------------------------------------------------------------------------------------
myuser@mypc:~$ nordvpn c
Connecting to .... Server
You are connected to .... Server
-----------------------------------------------------------------------------------------------------------------
myuser@mypc:~$ nordvpn d
You are disconnected from NordVPN.
How would you rate your connection quality on a scale from 1 (poor) to 5 (excellent)? Type 'nordvpn rate [1-5]'.
-----------------------------------------------------------------------------------------------------------------
myuser@mypc:~$ sudo iptables -S
-P INPUT ACCEPT
-P FORWARD DROP
-P OUTPUT ACCEPT
-N DOCKER
-N DOCKER-BRIDGE
-N DOCKER-CT
-N DOCKER-FORWARD
-N DOCKER-ISOLATION-STAGE-1
-N DOCKER-ISOLATION-STAGE-2
-N DOCKER-USER
-A INPUT -i eno1 -p udp -m udp --dport 8265:8266 -m comment --comment nordvpn -j ACCEPT
-A INPUT -i eno1 -p udp -m udp --sport 8265:8266 -m comment --comment nordvpn -j ACCEPT
-A INPUT -i eno1 -p udp -m udp --dport 8096 -m comment --comment nordvpn -j ACCEPT
-A INPUT -i eno1 -p udp -m udp --sport 8096 -m comment --comment nordvpn -j ACCEPT
-A INPUT -i eno1 -p udp -m udp --dport 8086 -m comment --comment nordvpn -j ACCEPT
-A INPUT -i eno1 -p udp -m udp --sport 8086 -m comment --comment nordvpn -j ACCEPT
-A INPUT -i eno1 -p udp -m udp --dport 8076 -m comment --comment nordvpn -j ACCEPT
-A INPUT -i eno1 -p udp -m udp --sport 8076 -m comment --comment nordvpn -j ACCEPT
-A INPUT -i eno1 -p udp -m udp --dport 22 -m comment --comment nordvpn -j ACCEPT
-A INPUT -i eno1 -p udp -m udp --sport 22 -m comment --comment nordvpn -j ACCEPT
-A INPUT -i eno1 -p tcp -m tcp --dport 8265:8266 -m comment --comment nordvpn -j ACCEPT
-A INPUT -i eno1 -p tcp -m tcp --sport 8265:8266 -m comment --comment nordvpn -j ACCEPT
-A INPUT -i eno1 -p tcp -m tcp --dport 8096 -m comment --comment nordvpn -j ACCEPT
-A INPUT -i eno1 -p tcp -m tcp --sport 8096 -m comment --comment nordvpn -j ACCEPT
-A INPUT -i eno1 -p tcp -m tcp --dport 8086 -m comment --comment nordvpn -j ACCEPT
-A INPUT -i eno1 -p tcp -m tcp --sport 8086 -m comment --comment nordvpn -j ACCEPT
-A INPUT -i eno1 -p tcp -m tcp --dport 8076 -m comment --comment nordvpn -j ACCEPT
-A INPUT -i eno1 -p tcp -m tcp --sport 8076 -m comment --comment nordvpn -j ACCEPT
-A INPUT -i eno1 -p tcp -m tcp --dport 22 -m comment --comment nordvpn -j ACCEPT
-A INPUT -i eno1 -p tcp -m tcp --sport 22 -m comment --comment nordvpn -j ACCEPT
-A INPUT -s 10.1.103.102/32 -i eno1 -m comment --comment nordvpn -j ACCEPT
-A INPUT -s 10.1.101.0/24 -i eno1 -m comment --comment nordvpn -j ACCEPT
-A INPUT -s 172.17.0.0/16 -i eno1 -m comment --comment nordvpn -j ACCEPT
-A INPUT -s 10.1.100.0/24 -i eno1 -m comment --comment nordvpn -j ACCEPT
-A FORWARD -d 10.1.103.102/32 -o eno1 -m comment --comment nordvpn -j ACCEPT
-A FORWARD -d 10.1.101.0/24 -o eno1 -m comment --comment nordvpn -j ACCEPT
-A FORWARD -d 172.17.0.0/16 -o eno1 -m comment --comment nordvpn -j ACCEPT
-A FORWARD -d 10.1.100.0/24 -o eno1 -m comment --comment nordvpn -j ACCEPT
-A FORWARD -j DOCKER-USER
-A FORWARD -j DOCKER-FORWARD
-A OUTPUT -d 169.254.0.0/16 -p tcp -m tcp --dport 53 -m comment --comment nordvpn -j DROP
-A OUTPUT -d 169.254.0.0/16 -p udp -m udp --dport 53 -m comment --comment nordvpn -j DROP
-A OUTPUT -d 192.168.0.0/16 -p tcp -m tcp --dport 53 -m comment --comment nordvpn -j DROP
-A OUTPUT -d 192.168.0.0/16 -p udp -m udp --dport 53 -m comment --comment nordvpn -j DROP
-A OUTPUT -d 172.16.0.0/12 -p tcp -m tcp --dport 53 -m comment --comment nordvpn -j DROP
-A OUTPUT -d 172.16.0.0/12 -p udp -m udp --dport 53 -m comment --comment nordvpn -j DROP
-A OUTPUT -d 10.0.0.0/8 -p tcp -m tcp --dport 53 -m comment --comment nordvpn -j DROP
-A OUTPUT -d 10.0.0.0/8 -p udp -m udp --dport 53 -m comment --comment nordvpn -j DROP
-A OUTPUT -o eno1 -p udp -m udp --dport 8265:8266 -m comment --comment nordvpn -j ACCEPT
-A OUTPUT -o eno1 -p udp -m udp --sport 8265:8266 -m comment --comment nordvpn -j ACCEPT
-A OUTPUT -o eno1 -p udp -m udp --dport 8096 -m comment --comment nordvpn -j ACCEPT
-A OUTPUT -o eno1 -p udp -m udp --sport 8096 -m comment --comment nordvpn -j ACCEPT
-A OUTPUT -o eno1 -p udp -m udp --dport 8086 -m comment --comment nordvpn -j ACCEPT
-A OUTPUT -o eno1 -p udp -m udp --sport 8086 -m comment --comment nordvpn -j ACCEPT
-A OUTPUT -o eno1 -p udp -m udp --dport 8076 -m comment --comment nordvpn -j ACCEPT
-A OUTPUT -o eno1 -p udp -m udp --sport 8076 -m comment --comment nordvpn -j ACCEPT
-A OUTPUT -o eno1 -p udp -m udp --dport 22 -m comment --comment nordvpn -j ACCEPT
-A OUTPUT -o eno1 -p udp -m udp --sport 22 -m comment --comment nordvpn -j ACCEPT
-A OUTPUT -o eno1 -p tcp -m tcp --dport 8265:8266 -m comment --comment nordvpn -j ACCEPT
-A OUTPUT -o eno1 -p tcp -m tcp --sport 8265:8266 -m comment --comment nordvpn -j ACCEPT
-A OUTPUT -o eno1 -p tcp -m tcp --dport 8096 -m comment --comment nordvpn -j ACCEPT
-A OUTPUT -o eno1 -p tcp -m tcp --sport 8096 -m comment --comment nordvpn -j ACCEPT
-A OUTPUT -o eno1 -p tcp -m tcp --dport 8086 -m comment --comment nordvpn -j ACCEPT
-A OUTPUT -o eno1 -p tcp -m tcp --sport 8086 -m comment --comment nordvpn -j ACCEPT
-A OUTPUT -o eno1 -p tcp -m tcp --dport 8076 -m comment --comment nordvpn -j ACCEPT
-A OUTPUT -o eno1 -p tcp -m tcp --sport 8076 -m comment --comment nordvpn -j ACCEPT
-A OUTPUT -o eno1 -p tcp -m tcp --dport 22 -m comment --comment nordvpn -j ACCEPT
-A OUTPUT -o eno1 -p tcp -m tcp --sport 22 -m comment --comment nordvpn -j ACCEPT
-A OUTPUT -d 10.1.103.102/32 -o eno1 -m comment --comment nordvpn -j ACCEPT
-A OUTPUT -d 10.1.101.0/24 -o eno1 -m comment --comment nordvpn -j ACCEPT
-A OUTPUT -d 172.17.0.0/16 -o eno1 -m comment --comment nordvpn -j ACCEPT
-A OUTPUT -d 10.1.100.0/24 -o eno1 -m comment --comment nordvpn -j ACCEPT
-A DOCKER -d 172.19.0.2/32 ! -i br-b5a5c19de523 -o br-b5a5c19de523 -p tcp -m tcp --dport 8096 -j ACCEPT
-A DOCKER -d 172.17.0.2/32 ! -i docker0 -o docker0 -p tcp -m tcp --dport 8266 -j ACCEPT
-A DOCKER -d 172.21.0.2/32 ! -i br-132dea6ad197 -o br-132dea6ad197 -p tcp -m tcp --dport 3003 -j ACCEPT
-A DOCKER -d 172.17.0.2/32 ! -i docker0 -o docker0 -p tcp -m tcp --dport 8265 -j ACCEPT
-A DOCKER ! -i br-054134011ae8 -o br-054134011ae8 -j DROP
-A DOCKER ! -i br-132dea6ad197 -o br-132dea6ad197 -j DROP
-A DOCKER ! -i br-5b4dad9447cb -o br-5b4dad9447cb -j DROP
-A DOCKER ! -i br-758bf40057d3 -o br-758bf40057d3 -j DROP
-A DOCKER ! -i br-b5a5c19de523 -o br-b5a5c19de523 -j DROP
-A DOCKER ! -i docker0 -o docker0 -j DROP
-A DOCKER-BRIDGE -o br-054134011ae8 -j DOCKER
-A DOCKER-BRIDGE -o br-132dea6ad197 -j DOCKER
-A DOCKER-BRIDGE -o br-5b4dad9447cb -j DOCKER
-A DOCKER-BRIDGE -o br-758bf40057d3 -j DOCKER
-A DOCKER-BRIDGE -o br-b5a5c19de523 -j DOCKER
-A DOCKER-BRIDGE -o docker0 -j DOCKER
-A DOCKER-CT -o br-054134011ae8 -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
-A DOCKER-CT -o br-132dea6ad197 -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
-A DOCKER-CT -o br-5b4dad9447cb -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
-A DOCKER-CT -o br-758bf40057d3 -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
-A DOCKER-CT -o br-b5a5c19de523 -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
-A DOCKER-CT -o docker0 -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
-A DOCKER-FORWARD -j DOCKER-CT
-A DOCKER-FORWARD -j DOCKER-ISOLATION-STAGE-1
-A DOCKER-FORWARD -j DOCKER-BRIDGE
-A DOCKER-FORWARD -i br-054134011ae8 -j ACCEPT
-A DOCKER-FORWARD -i br-132dea6ad197 -j ACCEPT
-A DOCKER-FORWARD -i br-5b4dad9447cb -j ACCEPT
-A DOCKER-FORWARD -i br-758bf40057d3 -j ACCEPT
-A DOCKER-FORWARD -i br-b5a5c19de523 -j ACCEPT
-A DOCKER-FORWARD -i docker0 -j ACCEPT
-A DOCKER-ISOLATION-STAGE-1 -i br-054134011ae8 ! -o br-054134011ae8 -j DOCKER-ISOLATION-STAGE-2
-A DOCKER-ISOLATION-STAGE-1 -i br-132dea6ad197 ! -o br-132dea6ad197 -j DOCKER-ISOLATION-STAGE-2
-A DOCKER-ISOLATION-STAGE-1 -i br-5b4dad9447cb ! -o br-5b4dad9447cb -j DOCKER-ISOLATION-STAGE-2
-A DOCKER-ISOLATION-STAGE-1 -i br-758bf40057d3 ! -o br-758bf40057d3 -j DOCKER-ISOLATION-STAGE-2
-A DOCKER-ISOLATION-STAGE-1 -i br-b5a5c19de523 ! -o br-b5a5c19de523 -j DOCKER-ISOLATION-STAGE-2
-A DOCKER-ISOLATION-STAGE-1 -i docker0 ! -o docker0 -j DOCKER-ISOLATION-STAGE-2
-A DOCKER-ISOLATION-STAGE-2 -o docker0 -j DROP
-A DOCKER-ISOLATION-STAGE-2 -o br-b5a5c19de523 -j DROP
-A DOCKER-ISOLATION-STAGE-2 -o br-758bf40057d3 -j DROP
-A DOCKER-ISOLATION-STAGE-2 -o br-5b4dad9447cb -j DROP
-A DOCKER-ISOLATION-STAGE-2 -o br-132dea6ad197 -j DROP
-A DOCKER-ISOLATION-STAGE-2 -o br-054134011ae8 -j DROP
-A DOCKER-USER -j RETURN
myuser@mypc:~$