Question about UFW and LXD (FIrefox in a LXD container)

Greetings:

I run firefox in an LXD container (Ubuntu 20.10) on a host running Debian 11. I would like to institute UFW on the host however everytime I enable my firefox browser (in the lxd container) can no longer connect to websites. Here are my pertinent UFW rules:

 To                         Action      From
 --                         ------      ----
[ 1] 56216                      ALLOW IN    192.168.86.0/24            # LAN to SSH
[ 2] 56216                      ALLOW IN    192.168.87.0/24            # wg0 to SSH

[11] plexmediaserver            ALLOW IN    Anywhere                  
[12] 10.9.21.0/24 on lxdbr0     ALLOW FWD   Anywhere on enp42s0       
[13] Anywhere on lxdbr0         ALLOW FWD   Anywhere                   (out)
[14] 192.168.86.0/24 on vethea2ddd10 ALLOW FWD   Anywhere on enp42s0       
[15] 192.168.86.0/24 on veth95e57722 ALLOW FWD   Anywhere on enp42s0       
[16] Anywhere                   ALLOW OUT   Anywhere on lxdbr0         (out)
[17] plexmediaserver (v6)       ALLOW IN    Anywhere (v6)             
[18] Anywhere (v6) on lxdbr0    ALLOW FWD   Anywhere (v6)              (out)
[19] Anywhere (v6)              ALLOW OUT   Anywhere (v6) on lxdbr0    (out)

Rules 3-10 are rules to block access to certain public IPs from ANY.

My /etc/ufw/sysctl.conf in pertinent part:

net/ipv4/ip_forward=1
net/ipv6/conf/default/forwarding=1
net/ipv6/conf/all/forwarding=1

lxdbr0 is the bridge that the Firefox container uses.

Any ideas? Thank you!

Nevermind, solved here: Lxd bridge doesn't work with IPv4 and UFW with nftables - #17 by tomp

1 Like