{"record":{"id":"eecf2663f724f6e1","repo":"netbirdio/netbird","slug":"delete-snat-rule-w","errorCode":null,"errorMessage":"delete SNAT rule: %w","messagePattern":"delete SNAT rule: %w","errorType":"console","errorClass":null,"httpStatus":null,"severity":"error","filePath":"client/firewall/iptables/router_linux.go","lineNumber":903,"sourceCode":"\t_, hadDNAT := r.rules[ruleKey+dnatSuffix]\n\t_, hadSNAT := r.rules[ruleKey+snatSuffix]\n\t_, hadFWD := r.rules[ruleKey+fwdSuffix]\n\tif !hadDNAT && !hadSNAT && !hadFWD {\n\t\treturn nil\n\t}\n\n\tvar merr *multierror.Error\n\tif dnatRule, exists := r.rules[ruleKey+dnatSuffix]; exists {\n\t\tif err := r.iptablesClient.Delete(tableNat, chainRTRDR, dnatRule...); err != nil {\n\t\t\tmerr = multierror.Append(merr, fmt.Errorf(\"delete DNAT rule: %w\", err))\n\t\t} else {\n\t\t\tdelete(r.rules, ruleKey+dnatSuffix)\n\t\t}\n\t}\n\n\tif snatRule, exists := r.rules[ruleKey+snatSuffix]; exists {\n\t\tif err := r.iptablesClient.Delete(tableNat, chainRTNAT, snatRule...); err != nil {\n\t\t\tmerr = multierror.Append(merr, fmt.Errorf(\"delete SNAT rule: %w\", err))\n\t\t} else {\n\t\t\tdelete(r.rules, ruleKey+snatSuffix)\n\t\t}\n\t}\n\n\tif fwdRule, exists := r.rules[ruleKey+fwdSuffix]; exists {\n\t\tif err := r.iptablesClient.Delete(tableFilter, chainRTFWDOUT, fwdRule...); err != nil {\n\t\t\tmerr = multierror.Append(merr, fmt.Errorf(\"delete forward rule: %w\", err))\n\t\t} else {\n\t\t\tdelete(r.rules, ruleKey+fwdSuffix)\n\t\t}\n\t}\n\n\t// Release the refcount only once all rules are gone from the kernel. On\n\t// partial failure the failed entries stay in r.rules so a retry can remove\n\t// them and release then.\n\tif merr == nil {\n\t\tif err := r.ipFwdState.ReleaseForwarding(r.v6); err != nil {","sourceCodeStart":885,"sourceCodeEnd":921,"githubUrl":"https://github.com/netbirdio/netbird/blob/93e97f4bf1ad715072dcb3fb6cdb1763431b5a9c/client/firewall/iptables/router_linux.go#L885-L921","documentation":"Error \"delete SNAT rule: %w\" thrown in netbirdio/netbird.","triggerScenarios":"Thrown at client/firewall/iptables/router_linux.go:903 when the library encounters an invalid state.","commonSituations":"See trigger scenarios.","solutions":[],"exampleFix":null,"handlingStrategy":null,"validationCode":null,"typeGuard":null,"tryCatchPattern":null,"preventionTips":[],"tags":[],"backgroundTag":null,"analyzedSha":"93e97f4bf1ad715072dcb3fb6cdb1763431b5a9c","analyzedAt":"2026-08-16T03:09:19.136Z","schemaVersion":2},"datasetVersion":"2026-08-16T08:17:34.114Z"}