netbirdio/netbird · error

remove iptables forward rule: %v

Error message

remove iptables forward rule: %v

What it means

Error "remove iptables forward rule: %v" thrown in netbirdio/netbird.

Source

Thrown at client/firewall/nftables/router_linux.go:1452

	}

	return *chain.Hooknum == *nftables.ChainHookForward || *chain.Hooknum == *nftables.ChainHookInput
}

func isIptablesTable(name string) bool {
	switch name {
	case tableNameFilter, tableNat, tableMangle, tableRaw, tableSecurity:
		return true
	}
	return false
}

func (r *router) removeAcceptFilterRulesIptables(ipt *iptables.IPTables) error {
	var merr *multierror.Error

	for _, rule := range r.getAcceptForwardRules() {
		if err := ipt.DeleteIfExists("filter", chainNameForward, rule...); err != nil {
			merr = multierror.Append(merr, fmt.Errorf("remove iptables forward rule: %v", err))
		}
	}

	inputRule := r.getAcceptInputRule()
	if err := ipt.DeleteIfExists("filter", chainNameInput, inputRule...); err != nil {
		merr = multierror.Append(merr, fmt.Errorf("remove iptables input rule: %v", err))
	}

	return nberrors.FormatErrorOrNil(merr)
}

// RemoveNatRule removes the prerouting mark rule
func (r *router) RemoveNatRule(pair firewall.RouterPair) error {
	if err := r.refreshRulesMap(); err != nil {
		return fmt.Errorf(refreshRulesMapError, err)
	}

	var merr *multierror.Error

View on GitHub (pinned to 93e97f4bf1)

When it happens

Trigger: Thrown at client/firewall/nftables/router_linux.go:1452 when the library encounters an invalid state.

Common situations: See trigger scenarios.

AI-assisted analysis of netbirdio/netbird@93e97f4bf1 (2026-08-16). Data as JSON: /api/errors/bc712d78df4daa98. Report an issue: GitHub.