A way to fix this would be to not bring up the network if the firewall fails. I suggest adding the following file:
/lib/systemd/system/networking.service.d/30_netfilter-persistent.conf With the following content: [Unit] ## Fail Closed Mechanism. ## When the firewall systemd service failed, do not bring up the network. Requires=netfilter-persistent.service
