From: ben@decadent.org.uk   
      
   Control: severity -1 serious   
   Control: affects -1 libvirt-daemon-driver-network   
      
   On Sat, 21 Feb 2026 07:25:37 +0100 Michael Ott  wrote:   
   > Package: iptables   
   > Version: 1.8.12-1   
   > Severity: important   
   >    
   > Dear Maintainer,   
   >    
   > libvirt cannnot longer start the network   
   >    
   > virsh net-start default   
   > error: Failed to start network default   
   > error: internal error: Failed to run firewall command iptables -w --table   
   filter --list-rules:   
   >    
   > When I try the command "iptables -w --table filter --list-rules" it works   
   >    
   > Downgrade to 1.8.11-4 helps   
   [...]   
      
   I can also confirm this.   
      
   In my case I had to downgrade iptables *and reboot*.  Restarting   
   libvirtd after downgrading wasn't enough!  I thought that might be due   
   to an interaction with other firewall rules set through iptables,   
   specifically from ufw.  However, the output of "nft list ruleset ip"   
   with ufw started and libvirt's network not started does not change   
   between the 2 versions (aside from packet counts).   
      
   Ben.   
      
   --    
   Ben Hutchings   
   Who are all these weirdos? - David Bowie, on joining IRC   
      
   -----BEGIN PGP SIGNATURE-----   
      
   iQIzBAABCgAdFiEErCspvTSmr92z9o8157/I7JWGEQkFAmmZ+LwACgkQ57/I7JWG   
   EQn7NA/+PjeIGwLtoe68+3uVZuitQu1YevjHUs0VGdDtsWm3Skl7mQihLoyCzMjg   
   /5a3C5ESs1yodp8/+oS0z84FgcFMVcje8BTtjol6JLSGBoew+J8w4Z+6yYLj4Kdr   
   IdM++GQOrJOkaozr0r0qJRMbmnKPN5Y31xW1DYDZY70mjB9Ddq66VpRkpEMN9pS2   
   Nnwj1+rIYwWmLSdQw4VSzzDfD6iWQbfCCtBgKRUNuX/wVrhn/qiIS5n6/MM5E8dJ   
   2IzJltMhSlEaQvTRkWTFsJUBqdl5J/O4gX//A0NJ+9mdfkEF/Q5gdtTz7IDkk6h4   
   7oeBVGAQgmaKiJ1trftjCRl+SvANthrKmyuy9yicu2fHRhtS/LOo5zXuzN3Q0m0Y   
   3X7FUbN/3kSRTceyevHdvAcAR/0k/kMXcXUTTX4rHWkaSdEPyx+DhogndeOBfXig   
   wTxZ3yl1Uhm7gwLeGd/DzuMo9fge2xFaZtgUdObuihLqjIGJw1AQcKNP7NKB340Q   
   Xxjgsu8Yotn9wErXuZxnr0zF7swe9sMG4AvHXWXt3EiU1Q0olN6gqX3O0DOSHF6V   
   8tlZG29PODB3aw6heBpyPnaytdv+yMog/3bRJE3WeKkdH9CYXifBTxcTn/5IuZvE   
   tlZ5NVA91nXyxMBeopNunj2PYyaD1DXVXAedq/ppucgUg1ZuNOI=   
   =F/Jo   
   -----END PGP SIGNATURE-----   
      
   --- SoupGate-Win32 v1.05   
    * Origin: you cannot sedate... all the things you hate (1:229/2)