IPv4 is always missing

[tomp (Thomas Parrott)]

Hi,

Basically the problem is with your nftables ruleset having default drop rules in INPUT and FORWARD that are also blocking LXD’s nftables rules:

reject with icmpx admin-prohibited

Please see this thread for more info:

Lxd bridge doesn't work with IPv4 and UFW with nftables

@stgraber because of the way nftables allows multiple base chains to operate on a packet (those that have a netfilter hook in them), even if one of them accepts the packet, it may still be dropped later due to another chain’s rules and policies. Because we create our own lxd chains with netfilter hooks. This means that if an application is using the iptables nftables shim and creates its own base chains with netfilter hooks and a default drop policy then our rules will not be final and packets …