Package: nftables
Version: 0.7-1
Severity: important

Dear Maintainer,

Bizarrely, the quite simple "workstation" example causes the language picker in
gdm3 to disappear and the default layout to switch back to qwerty.  As far as I
can tell this doesn't happen on the next boot, but rather a couple of boots
later.

Disabling the nftables ruleset and rebooting fixes the problem completely.

I'm not sure whether this is an nftables bug or a gdm bug, but I'm putting it
here as similar iptables rules don't cause this behavior.



-- System Information:
Debian Release: 9.0
  APT prefers testing
  APT policy: (900, 'testing')
Architecture: amd64
 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.9.0-3-amd64 (SMP w/8 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages nftables depends on:
ii  dpkg                 1.18.24
ii  init-system-helpers  1.48
ii  libc6                2.24-10
ii  libgmp10             2:6.1.2+dfsg-1
ii  libmnl0              1.0.4-2
ii  libnftnl4            1.0.7-1
ii  libreadline7         7.0-3
ii  libxtables12         1.6.0+snapshot20161117-6

nftables recommends no packages.

nftables suggests no packages.

-- Configuration Files:
/etc/nftables.conf changed:
flush ruleset
table inet filter {
        chain input {
                type filter hook input priority 0;
                # accept any localhost traffic
                iif lo accept
                # accept traffic originated from us
                ct state established,related accept
                # activate the following line to accept common local services
                #tcp dport { 22, 80, 443 } ct state new accept
                # accept neighbour discovery otherwise IPv6 connectivity breaks.
                ip6 nexthdr icmpv6 icmpv6 type { nd-neighbor-solicit,  
nd-router-advert, nd-neighbor-advert } accept
                # count and drop any other traffic
                counter drop
        }
}


-- no debconf information

Reply via email to