{"record":{"id":"588e2d8d714738b6","repo":"netbirdio/netbird","slug":"flush-allow-input-netbird-rules-w","errorCode":null,"errorMessage":"flush allow input netbird rules: %w","messagePattern":"flush allow input netbird rules: %w","errorType":"exception","errorClass":null,"httpStatus":null,"severity":"error","filePath":"client/firewall/nftables/manager_linux.go","lineNumber":457,"sourceCode":"// which doesn't override DROP rules in external tables (e.g. firewalld).\n// Should add passthrough rules to external chains (like the native mode router's\n// addExternalChainsRules does) for both the netbird table family and inet tables.\n// The netbird table itself is fine (routing chains already exist there), but\n// non-netbird tables with INPUT/FORWARD hooks can still DROP our WG traffic.\nfunc (m *Manager) AllowNetbird() error {\n\tm.mutex.Lock()\n\tdefer m.mutex.Unlock()\n\n\tif err := m.aclManager.createDefaultAllowRules(); err != nil {\n\t\treturn fmt.Errorf(\"create default allow rules: %w\", err)\n\t}\n\tif m.hasIPv6() {\n\t\tif err := m.aclManager6.createDefaultAllowRules(); err != nil {\n\t\t\treturn fmt.Errorf(\"create v6 default allow rules: %w\", err)\n\t\t}\n\t}\n\tif err := m.rConn.Flush(); err != nil {\n\t\treturn fmt.Errorf(\"flush allow input netbird rules: %w\", err)\n\t}\n\n\tif err := firewalld.TrustInterface(m.wgIface.Name()); err != nil {\n\t\tlog.Warnf(\"failed to trust interface in firewalld: %v\", err)\n\t}\n\n\treturn nil\n}\n\n// SetLegacyManagement sets the route manager to use legacy management\nfunc (m *Manager) SetLegacyManagement(isLegacy bool) error {\n\tif err := firewall.SetLegacyManagement(m.router, isLegacy); err != nil {\n\t\treturn err\n\t}\n\tif m.hasIPv6() {\n\t\treturn firewall.SetLegacyManagement(m.router6, isLegacy)\n\t}\n\treturn nil","sourceCodeStart":439,"sourceCodeEnd":475,"githubUrl":"https://github.com/netbirdio/netbird/blob/93e97f4bf1ad715072dcb3fb6cdb1763431b5a9c/client/firewall/nftables/manager_linux.go#L439-L475","documentation":"Error \"flush allow input netbird rules: %w\" thrown in netbirdio/netbird.","triggerScenarios":"Thrown at client/firewall/nftables/manager_linux.go:457 when the library encounters an invalid state.","commonSituations":"See trigger scenarios.","solutions":[],"exampleFix":null,"handlingStrategy":null,"validationCode":null,"typeGuard":null,"tryCatchPattern":null,"preventionTips":[],"tags":[],"backgroundTag":null,"analyzedSha":"93e97f4bf1ad715072dcb3fb6cdb1763431b5a9c","analyzedAt":"2026-08-16T03:09:19.136Z","schemaVersion":2},"datasetVersion":"2026-08-16T08:17:34.114Z"}