Lost access to server after installing nftables

Support apps
,
1

What app is this about, and its version: nftables
What YunoHost version are you running: 12.1.40.1
What type of hardware are you using: Old laptop or computer

Describe your issue

After installing nftables, I’m no longer able to access my server from outside of my local network. I figured my IP was on this ban list for some reason, so I removed the default blocklist. After that I was still unable to access the server. Then I uninstalled nftables completely, and now am still completely unable to access the server remotely.

Share relevant logs or error messages

none

2

Try

 yunohost tools regen-conf nftables -d -n
# if needed :
 yunohost tools regen-conf nftables -f
3

Salut,

J’ai installé, il y a quelques mois, le script Linux-scripts/yunohost/block_countries_yunohost.md at main · DeMiro5001/Linux-scripts · GitHub de @jarod5001

Faut-il le supprimer avant d’installer nftables blacklist ?

4

Lo siento, no hablo Frances

5

No luck, but thank you.

6

Probably yes, they serve similar purposes with more lists in the nftables block list app

@Sid it would help to run the diagnosis and share the link
Did you delete the yunohost app or the debian package?

1 Like
7

Thanks, here are the results of the diagnosis:

https://paste.yunohost.org/raw/pumonuqede

8

I see in the results of the diagnosis that nftables was not uninstalled when I performed the action from the GUI. I ran sudo systemctl stop nftables.service and was able to successfully regain remote access.

Is there a way I can effectively uninstall or remove this service?

9

No lo sientas, no sabía que eras español.

10

You should not do that : this is the yunohost firewall, not the nftables-blacklist service app.

11

Well I have the firewall on my router configured properly, regardless.

Any suggestions on what I should do?

12

Fail2ban won’t be able to set rules on your router.
Can you share the output of
yunohost app list | grep nft

13

This is unnecessarily hostile, I’m only trying to help (que sólo te quería avisar por si no sabías qué era nftables. Pero, claro, si quieres desinstalar el firewall de yunohost -y atenerte a las consecuencias, que no serán pocas-, pues allá tú eh :man_shrugging: ).

Otherwise, you can check this:

sudo nft list sets
14

This does not return anything, unfortunately

15

I apologize if it came off that way, that was not my intention.

This does not return anything either

16

Ok.

Did you restart nftables ?

17

table inet filter {
}

18

Can you check if fail2ban is running ? systemctl status fail2ban

If it is not systemctl start fail2ban

and sudo fail2ban-client status sshd

19

fail2ban was inactive. Restarted. After which sudo nft list sets still returns the same response.

sudo fail2ban-client status sshd returns the following:

○ fail2ban.service - Fail2Ban Service
Loaded: loaded (/lib/systemd/system/fail2ban.service; enabled; preset: ena>
Drop-In: /etc/systemd/system/fail2ban.service.d
└─systemd-override-bind-nftables.conf
Active: inactive (dead) since Fri 2026-06-19 17:39:52 CDT; 23h ago
Duration: 2w 5d 28min 4.234s
Docs: man:fail2ban(1)
Process: 649 ExecStart=/usr/bin/fail2ban-server -xf start (code=killed, sig>
Process: 1701962 ExecStop=/usr/bin/fail2ban-client stop (code=exited, statu>
Main PID: 649 (code=killed, signal=TERM)
CPU: 3h 25min 43.716s

20

It should return something related to the sshd jail