[GH-ISSUE #2573] [Ubuntu 25.10] No internet connection after connect #1165

Open
opened 2026-10-13 20:35:34 +00:00 by bsakaguchi · 1 comment
Owner

Originally created by @BotanikRock on GitHub (May 6, 2026).
Original GitHub issue: https://github.com/amnezia-vpn/amnezia-client/issues/2573

Describe the bug
After successful connection to server, there is no access to any address. neither through domain, nor through ip.
Same time other devices(ipad and android phone) from same network connect to same server and works perfectly

To Reproduce
Connect to the Amnezia server using application AmneziaVPN

Log files

[2026-05-06 12:08:04.080Z] [DEBUG] Amnezia  : VpnConfigurator::getDnsForConfig "1.1.1.1" "1.0.0.1"
[2026-05-06 12:08:04.080Z] [DEBUG] Amnezia  : "Trying to connect to VPN, server index is 0, container is amnezia-awg, route mode is" Settings::VpnOnlyForwardSites
[2026-05-06 12:08:04.081Z] [DEBUG] Amnezia  : "Site split tunneling is disabled, route mode is 0"
[2026-05-06 12:08:04.081Z] [DEBUG] Amnezia  : "App split tunneling is disabled, route mode is 0"
[2026-05-06 12:08:04.081Z] [DEBUG] Amnezia LocalSocketController : Initializing
[2026-05-06 12:08:04.081Z] [DEBUG] Amnezia LocalSocketController : Connecting to: /var/run/amneziavpn/daemon.socket
[2026-05-06 12:08:04.081Z] [DEBUG] Amnezia LocalSocketController : Daemon connected
[2026-05-06 12:08:04.081Z] [DEBUG] Amnezia LocalSocketController : Check status
[2026-05-06 12:08:04.082Z] [DEBUG] Amnezia LocalSocketController : Reading
[2026-05-06 12:08:04.082Z] [DEBUG] Amnezia LocalSocketController : Parse command: status
[2026-05-06 12:08:06.775Z] [DEBUG] Amnezia LocalSocketController : Reading
[2026-05-06 12:08:06.775Z] [DEBUG] Amnezia LocalSocketController : Parse command: connected
[2026-05-06 12:08:06.775Z] [DEBUG] Amnezia LocalSocketController : Handshake completed with: <deleted>
[2026-05-06 12:08:06.776Z] [DEBUG] Amnezia LocalSocketController : Check status
[2026-05-06 12:08:06.776Z] [DEBUG] Amnezia  : VpnProtocol::setConnectionState "Connected"
[2026-05-06 12:08:06.776Z] [DEBUG] Amnezia  : Connection state: 'Connected'
[2026-05-06 12:08:06.783Z] [WARNING] Amnezia  : VpnConnection::onConnectionStateChanged: Failed to clear saved routes
[2026-05-06 12:08:06.784Z] [DEBUG] Amnezia LocalSocketController : Reading
[2026-05-06 12:08:06.784Z] [DEBUG] Amnezia LocalSocketController : Parse command: status
[2026-05-06 12:14:49.796Z] [DEBUG] Amnezia  : LocalServer new connection
[2026-05-06 12:14:49.798Z] [DEBUG] Amnezia DaemonLocalServer : New connection received
[2026-05-06 12:14:49.798Z] [DEBUG] Amnezia DaemonLocalServerConnection : Connection created
[2026-05-06 12:14:49.799Z] [DEBUG] Amnezia DaemonLocalServerConnection : Read Data
[2026-05-06 12:14:49.800Z] [DEBUG] Amnezia DaemonLocalServerConnection : Command received: status
[2026-05-06 12:14:49.800Z] [DEBUG] Amnezia Daemon : Status request
[2026-05-06 12:14:49.800Z] [DEBUG] Amnezia DaemonLocalServerConnection : Read Data
[2026-05-06 12:14:49.800Z] [DEBUG] Amnezia DaemonLocalServerConnection : Command received: activate
[2026-05-06 12:14:49.801Z] [DEBUG] Amnezia Daemon : Activating interface
[2026-05-06 12:14:49.822Z] [DEBUG] Amnezia WireguardUtilsLinux : Created wireguard interface amn0
[2026-05-06 12:14:49.822Z] [DEBUG] Amnezia LinuxRouteMonitor : LinuxRouteMonitor created.
[2026-05-06 12:14:49.840Z] [WARNING] Amnezia LinuxFirewall : ( 2 ) $  iptables -C OUTPUT -j amnvpn.anchors 2> /dev/null
[2026-05-06 12:14:50.692Z] [INFO] Amnezia LinuxFirewall : Tearing down cgroup and routing rules
[2026-05-06 12:14:50.722Z] [WARNING] Amnezia LinuxFirewall : ( 255 ) $  ip route flush table amnvpnrt
[2026-05-06 12:14:50.722Z] [WARNING] Amnezia LinuxFirewall : Error: argument "amnvpnrt" is wrong: table id value is invalid
[2026-05-06 12:14:50.731Z] [DEBUG] Amnezia LinuxFirewall : LinuxFirewall::uninstall() complete
[2026-05-06 12:14:51.838Z] [WARNING] Amnezia LinuxFirewall : ( 123 ) $  if ! iptables -L OUTPUT -n --line-numbers -t filter 2> /dev/null | awk 'int($1) == 1 && $2 == "amnvpn.anchors" { found=1 } END { if(found==1) { exit 0 } else { exit 1 } }' ; then iptables -I OUTPUT -j amnvpn.anchors -t filter && iptables -L OUTPUT -n --line-numbers -t filter 2> /dev/null | awk 'int($1) > 1 && $2 == "amnvpn.anchors" { print $1; exit }' | xargs iptables -t filter -D OUTPUT ; fi
[2026-05-06 12:14:51.838Z] [WARNING] Amnezia LinuxFirewall : iptables: Bad rule (does a matching rule exist in that chain?).
[2026-05-06 12:14:51.860Z] [WARNING] Amnezia LinuxFirewall : ( 123 ) $  if ! ip6tables -L OUTPUT -n --line-numbers -t filter 2> /dev/null | awk 'int($1) == 1 && $2 == "amnvpn.anchors" { found=1 } END { if(found==1) { exit 0 } else { exit 1 } }' ; then ip6tables -I OUTPUT -j amnvpn.anchors -t filter && ip6tables -L OUTPUT -n --line-numbers -t filter 2> /dev/null | awk 'int($1) > 1 && $2 == "amnvpn.anchors" { print $1; exit }' | xargs ip6tables -t filter -D OUTPUT ; fi
[2026-05-06 12:14:51.860Z] [WARNING] Amnezia LinuxFirewall : ip6tables: Bad rule (does a matching rule exist in that chain?).
[2026-05-06 12:14:51.884Z] [WARNING] Amnezia LinuxFirewall : ( 123 ) $  if ! iptables -L POSTROUTING -n --line-numbers -t nat 2> /dev/null | awk 'int($1) == 1 && $2 == "amnvpn.anchors" { found=1 } END { if(found==1) { exit 0 } else { exit 1 } }' ; then iptables -I POSTROUTING -j amnvpn.anchors -t nat && iptables -L POSTROUTING -n --line-numbers -t nat 2> /dev/null | awk 'int($1) > 1 && $2 == "amnvpn.anchors" { print $1; exit }' | xargs iptables -t nat -D POSTROUTING ; fi
[2026-05-06 12:14:51.884Z] [WARNING] Amnezia LinuxFirewall : iptables: Bad rule (does a matching rule exist in that chain?).
[2026-05-06 12:14:51.907Z] [WARNING] Amnezia LinuxFirewall : ( 123 ) $  if ! ip6tables -L POSTROUTING -n --line-numbers -t nat 2> /dev/null | awk 'int($1) == 1 && $2 == "amnvpn.anchors" { found=1 } END { if(found==1) { exit 0 } else { exit 1 } }' ; then ip6tables -I POSTROUTING -j amnvpn.anchors -t nat && ip6tables -L POSTROUTING -n --line-numbers -t nat 2> /dev/null | awk 'int($1) > 1 && $2 == "amnvpn.anchors" { print $1; exit }' | xargs ip6tables -t nat -D POSTROUTING ; fi
[2026-05-06 12:14:51.907Z] [WARNING] Amnezia LinuxFirewall : ip6tables: Bad rule (does a matching rule exist in that chain?).
[2026-05-06 12:14:51.929Z] [WARNING] Amnezia LinuxFirewall : ( 123 ) $  if ! iptables -L OUTPUT -n --line-numbers -t mangle 2> /dev/null | awk 'int($1) == 1 && $2 == "amnvpn.anchors" { found=1 } END { if(found==1) { exit 0 } else { exit 1 } }' ; then iptables -I OUTPUT -j amnvpn.anchors -t mangle && iptables -L OUTPUT -n --line-numbers -t mangle 2> /dev/null | awk 'int($1) > 1 && $2 == "amnvpn.anchors" { print $1; exit }' | xargs iptables -t mangle -D OUTPUT ; fi
[2026-05-06 12:14:51.929Z] [WARNING] Amnezia LinuxFirewall : iptables: Bad rule (does a matching rule exist in that chain?).
[2026-05-06 12:14:51.950Z] [WARNING] Amnezia LinuxFirewall : ( 123 ) $  if ! ip6tables -L OUTPUT -n --line-numbers -t mangle 2> /dev/null | awk 'int($1) == 1 && $2 == "amnvpn.anchors" { found=1 } END { if(found==1) { exit 0 } else { exit 1 } }' ; then ip6tables -I OUTPUT -j amnvpn.anchors -t mangle && ip6tables -L OUTPUT -n --line-numbers -t mangle 2> /dev/null | awk 'int($1) > 1 && $2 == "amnvpn.anchors" { print $1; exit }' | xargs ip6tables -t mangle -D OUTPUT ; fi
[2026-05-06 12:14:51.950Z] [WARNING] Amnezia LinuxFirewall : ip6tables: Bad rule (does a matching rule exist in that chain?).
[2026-05-06 12:14:51.972Z] [WARNING] Amnezia LinuxFirewall : ( 123 ) $  if ! iptables -L PREROUTING -n --line-numbers -t raw 2> /dev/null | awk 'int($1) == 1 && $2 == "amnvpn.anchors" { found=1 } END { if(found==1) { exit 0 } else { exit 1 } }' ; then iptables -I PREROUTING -j amnvpn.anchors -t raw && iptables -L PREROUTING -n --line-numbers -t raw 2> /dev/null | awk 'int($1) > 1 && $2 == "amnvpn.anchors" { print $1; exit }' | xargs iptables -t raw -D PREROUTING ; fi
[2026-05-06 12:14:51.972Z] [WARNING] Amnezia LinuxFirewall : iptables: Bad rule (does a matching rule exist in that chain?).
[2026-05-06 12:14:51.994Z] [WARNING] Amnezia LinuxFirewall : ( 123 ) $  if ! ip6tables -L PREROUTING -n --line-numbers -t raw 2> /dev/null | awk 'int($1) == 1 && $2 == "amnvpn.anchors" { found=1 } END { if(found==1) { exit 0 } else { exit 1 } }' ; then ip6tables -I PREROUTING -j amnvpn.anchors -t raw && ip6tables -L PREROUTING -n --line-numbers -t raw 2> /dev/null | awk 'int($1) > 1 && $2 == "amnvpn.anchors" { print $1; exit }' | xargs ip6tables -t raw -D PREROUTING ; fi
[2026-05-06 12:14:51.994Z] [WARNING] Amnezia LinuxFirewall : ip6tables: Bad rule (does a matching rule exist in that chain?).
[2026-05-06 12:14:51.995Z] [INFO] Amnezia LinuxFirewall : Should be setting up cgroup in /sys/fs/cgroup/net_cls/amnvpnexclusions/ for traffic splitting
[2026-05-06 12:14:52.115Z] [WARNING] Amnezia LinuxFirewall : ( 1 ) $  if [ ! -d /sys/fs/cgroup/net_cls/amnvpnexclusions/ ] ; then mkdir /sys/fs/cgroup/net_cls/amnvpnexclusions/ ; sleep 0.1 ; echo 0x567 > /sys/fs/cgroup/net_cls/amnvpnexclusions//net_cls.classid ; fi
[2026-05-06 12:14:52.115Z] [WARNING] Amnezia LinuxFirewall : mkdir: No such file or directory
/bin/bash: line 1: /sys/fs/cgroup/net_cls/amnvpnexclusions//net_cls.classid: No such file or directory
[2026-05-06 12:14:52.130Z] [WARNING] Amnezia LinuxFirewall : ( 255 ) $  if ! ip rule list | grep -q 0x3211 ; then ip rule add from all fwmark 0x3211 lookup amnvpnrt pri 100 ; fi
[2026-05-06 12:14:52.130Z] [WARNING] Amnezia LinuxFirewall : Error: argument "amnvpnrt" is wrong: invalid table ID
[2026-05-06 12:14:52.162Z] [INFO] Amnezia LinuxFirewall : 000.allowLoopback(IPv4): OFF -> ON
[2026-05-06 12:14:52.175Z] [INFO] Amnezia LinuxFirewall : 000.allowLoopback(IPv6): OFF -> ON
[2026-05-06 12:14:52.188Z] [INFO] Amnezia LinuxFirewall : 100.blockAll(IPv4): OFF -> ON
[2026-05-06 12:14:52.201Z] [INFO] Amnezia LinuxFirewall : 100.blockAll(IPv6): OFF -> ON
[2026-05-06 12:14:52.215Z] [INFO] Amnezia LinuxFirewall : 110.allowNets(IPv4): OFF -> ON
[2026-05-06 12:14:52.239Z] [INFO] Amnezia LinuxFirewall : 120.blockNets(IPv4): OFF
[2026-05-06 12:14:52.260Z] [INFO] Amnezia LinuxFirewall : 200.allowVPN(IPv4): OFF -> ON
[2026-05-06 12:14:52.272Z] [INFO] Amnezia LinuxFirewall : 250.blockIPv6(IPv6): OFF -> ON
[2026-05-06 12:14:52.286Z] [INFO] Amnezia LinuxFirewall : 290.allowDHCP(IPv4): OFF -> ON
[2026-05-06 12:14:52.299Z] [INFO] Amnezia LinuxFirewall : 290.allowDHCP(IPv6): OFF -> ON
[2026-05-06 12:14:52.312Z] [INFO] Amnezia LinuxFirewall : 300.allowLAN(IPv4): OFF -> ON
[2026-05-06 12:14:52.325Z] [INFO] Amnezia LinuxFirewall : 300.allowLAN(IPv6): OFF -> ON
[2026-05-06 12:14:52.338Z] [INFO] Amnezia LinuxFirewall : 310.blockDNS(IPv4): OFF -> ON
[2026-05-06 12:14:52.460Z] [INFO] Amnezia LinuxFirewall : 320.allowDNS(IPv4): OFF -> ON
[2026-05-06 12:14:52.473Z] [WARNING] Amnezia LinuxFirewall : ( 2 ) $  if iptables -C amnvpn.a.400.allowPIA -j amnvpn.400.allowPIA -t filter 2> /dev/null ; then echo '400.allowPIA(IPv4): ON' ; else echo '400.allowPIA(IPv4): OFF -> ON' ; iptables -A amnvpn.a.400.allowPIA -j amnvpn.400.allowPIA -t filter; fi
[2026-05-06 12:14:52.473Z] [INFO] Amnezia LinuxFirewall : 400.allowPIA(IPv4): OFF -> ON
[2026-05-06 12:14:52.473Z] [WARNING] Amnezia LinuxFirewall : iptables v1.8.11 (nf_tables): Chain 'amnvpn.400.allowPIA' does not exist
Try `iptables -h' or 'iptables --help' for more information.
[2026-05-06 12:14:52.486Z] [WARNING] Amnezia LinuxFirewall : ( 2 ) $  if ip6tables -C amnvpn.a.400.allowPIA -j amnvpn.400.allowPIA -t filter 2> /dev/null ; then echo '400.allowPIA(IPv6): ON' ; else echo '400.allowPIA(IPv6): OFF -> ON' ; ip6tables -A amnvpn.a.400.allowPIA -j amnvpn.400.allowPIA -t filter; fi
[2026-05-06 12:14:52.486Z] [INFO] Amnezia LinuxFirewall : 400.allowPIA(IPv6): OFF -> ON
[2026-05-06 12:14:52.486Z] [WARNING] Amnezia LinuxFirewall : ip6tables v1.8.11 (nf_tables): Chain 'amnvpn.400.allowPIA' does not exist
Try `ip6tables -h' or 'ip6tables --help' for more information.
[2026-05-06 12:14:52.490Z] [DEBUG] Amnezia LinuxRouteMonitor : Adding exclusion route for <deleted>
[2026-05-06 12:14:52.491Z] [DEBUG] Amnezia  : Gateway  192.168.1.1  for interface  wlp0s20f3
[2026-05-06 12:14:52.492Z] [DEBUG] Amnezia WireguardUtilsLinux : Configuring peer <deleted>
[2026-05-06 12:14:52.492Z] [DEBUG] Amnezia LinuxRouteMonitor : Adding exclusion route for <deleted>
[2026-05-06 12:14:52.492Z] [DEBUG] Amnezia  : Gateway  192.168.1.1  for interface  wlp0s20f3
[2026-05-06 12:14:52.493Z] [DEBUG] Amnezia LinuxRouteMonitor : Adding exclusion route for /999999
[2026-05-06 12:14:52.493Z] [WARNING] Amnezia LinuxRouteMonitor : Invalid destination prefix
[2026-05-06 12:14:52.497Z] [DEBUG] Amnezia DnsUtilsLinux : Adding DNS resolver 1.1.1.1 via amn0
[2026-05-06 12:14:52.497Z] [DEBUG] Amnezia DnsUtilsLinux : Adding DNS resolver 1.0.0.1 via amn0
[2026-05-06 12:14:52.498Z] [DEBUG] Amnezia LinuxRouteMonitor : Adding route to 0.0.0.0/1
[2026-05-06 12:14:52.500Z] [DEBUG] Amnezia LinuxRouteMonitor : Adding route to 128.0.0.0/1
[2026-05-06 12:14:52.500Z] [DEBUG] Amnezia LinuxRouteMonitor : Adding route to ::/1
[2026-05-06 12:14:52.501Z] [DEBUG] Amnezia LinuxRouteMonitor : Adding route to 8000::/1
[2026-05-06 12:14:52.501Z] [DEBUG] Amnezia Daemon : Connection status: 1
[2026-05-06 12:14:52.534Z] [DEBUG] Amnezia DnsUtilsLinux : Setting DNS domain: XXXXXXXX via amn0 search
[2026-05-06 12:14:52.763Z] [DEBUG] Amnezia Daemon : Checking for handshake...
[2026-05-06 12:14:52.774Z] [DEBUG] Amnezia Daemon : awaiting<deleted>
[2026-05-06 12:14:52.775Z] [DEBUG] Amnezia DaemonLocalServerConnection : Read Data
[2026-05-06 12:14:52.775Z] [DEBUG] Amnezia DaemonLocalServerConnection : Command received: status
[2026-05-06 12:14:52.775Z] [DEBUG] Amnezia Daemon : Status request
[2026-05-06 12:14:52.776Z] [DEBUG] Amnezia DnsUtilsLinux : DnsUtilsLinux created.
[2026-05-06 12:14:52.785Z] [DEBUG] Amnezia  : No suitable DNS manager found.
[2026-05-06 12:14:52.864Z] [DEBUG] Amnezia LinuxNetworkWatcherWorker : Properties changed for interface org.freedesktop.NetworkManager.Device.Wireless
[2026-05-06 12:14:52.864Z] [DEBUG] Amnezia LinuxNetworkWatcherWorker : Access point did not changed. Ignoring the changes
[2026-05-06 12:14:58.865Z] [DEBUG] Amnezia LinuxNetworkWatcherWorker : Properties changed for interface org.freedesktop.NetworkManager.Device.Wireless
[2026-05-06 12:14:58.865Z] [DEBUG] Amnezia LinuxNetworkWatcherWorker : Access point did not changed. Ignoring the changes
[2026-05-06 12:15:04.865Z] [DEBUG] Amnezia LinuxNetworkWatcherWorker : Properties changed for interface org.freedesktop.NetworkManager.Device.Wireless
[2026-05-06 12:15:04.865Z] [DEBUG] Amnezia LinuxNetworkWatcherWorker : Access point did not changed. Ignoring the changes
[2026-05-06 12:15:10.864Z] [DEBUG] Amnezia LinuxNetworkWatcherWorker : Properties changed for interface org.freedesktop.NetworkManager.Device.Wireless
[2026-05-06 12:15:10.865Z] [DEBUG] Amnezia LinuxNetworkWatcherWorker : Access point did not changed. Ignoring the changes
ip -a 
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
       valid_lft forever preferred_lft forever
    inet6 ::1/128 scope host noprefixroute 
       valid_lft forever preferred_lft forever
2: enp0s31f6: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc fq_codel state DOWN group default qlen 1000
    link/ether f8:75:a4:19:aa:6a brd ff:ff:ff:ff:ff:ff
    altname enxf875a419aa6a
3: wwan0: <POINTOPOINT,NOARP> mtu 1500 qdisc noop state DOWN group default qlen 1000
    link/none 
4: wlp0s20f3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
    link/ether 4c:1d:96:78:7f:5d brd ff:ff:ff:ff:ff:ff
    altname wlx4c1d96787f5d
    inet 192.168.1.102/24 brd 192.168.1.255 scope global dynamic noprefixroute wlp0s20f3
       valid_lft 21240sec preferred_lft 21240sec
    inet6 fdea:33fa:3e70:0:6781:f230:f49f:b2c2/64 scope global temporary dynamic 
       valid_lft 600845sec preferred_lft 81891sec
    inet6 fdea:33fa:3e70:0:df84:7d9f:b2df:d5b5/64 scope global dynamic mngtmpaddr noprefixroute 
       valid_lft 4289854973sec preferred_lft 4289854973sec
    inet6 fe80::47a:5e1a:370b:b401/64 scope link noprefixroute 
       valid_lft forever preferred_lft forever
6: docker0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state DOWN group default 
    link/ether 02:42:b8:35:e4:30 brd ff:ff:ff:ff:ff:ff
    inet 172.17.0.1/16 brd 172.17.255.255 scope global docker0
       valid_lft forever preferred_lft forever
7: br-fcdbbf192f74: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state DOWN group default 
    link/ether 02:42:f4:6a:cb:9a brd ff:ff:ff:ff:ff:ff
    inet 172.18.0.1/16 brd 172.18.255.255 scope global br-fcdbbf192f74
       valid_lft forever preferred_lft forever
27: amn0: <POINTOPOINT,PROMISC,NOTRAILERS,UP,LOWER_UP> mtu 1376 qdisc fq_codel state UNKNOWN group default qlen 500
    link/none 
    inet 10.8.1.4/32 scope global amn0
       valid_lft forever preferred_lft forever
    inet6 fd58:baa6:dead::1/64 scope global 
       valid_lft forever preferred_lft forever
    inet6 fe80::74dd:a43a:844e:6e18/64 scope link stable-privacy proto kernel_ll 
       valid_lft forever preferred_lft forever
ip route                      
0.0.0.0/1 dev amn0 metric 1 
default via 192.168.1.1 dev wlp0s20f3 proto dhcp src 192.168.1.102 metric 600 
128.0.0.0/1 dev amn0 metric 1 
172.17.0.0/16 dev docker0 proto kernel scope link src 172.17.0.1 linkdown 
172.18.0.0/16 dev br-fcdbbf192f74 proto kernel scope link src 172.18.0.1 linkdown 
185.209.161.233 via 192.168.1.1 dev wlp0s20f3 
192.168.1.0/24 dev wlp0s20f3 proto kernel scope link src 192.168.1.102 metric 600

Desktop (please complete the following information):

  • OS: Ubuntu
  • Version 25.10

Server (please complete the following information):

  • OS: Ubuntu
  • Version 20.04.3
Image
Originally created by @BotanikRock on GitHub (May 6, 2026). Original GitHub issue: https://github.com/amnezia-vpn/amnezia-client/issues/2573 **Describe the bug** After successful connection to server, there is no access to any address. neither through domain, nor through ip. Same time other devices(ipad and android phone) from same network connect to same server and works perfectly **To Reproduce** Connect to the Amnezia server using application AmneziaVPN **Log files** ``` [2026-05-06 12:08:04.080Z] [DEBUG] Amnezia : VpnConfigurator::getDnsForConfig "1.1.1.1" "1.0.0.1" [2026-05-06 12:08:04.080Z] [DEBUG] Amnezia : "Trying to connect to VPN, server index is 0, container is amnezia-awg, route mode is" Settings::VpnOnlyForwardSites [2026-05-06 12:08:04.081Z] [DEBUG] Amnezia : "Site split tunneling is disabled, route mode is 0" [2026-05-06 12:08:04.081Z] [DEBUG] Amnezia : "App split tunneling is disabled, route mode is 0" [2026-05-06 12:08:04.081Z] [DEBUG] Amnezia LocalSocketController : Initializing [2026-05-06 12:08:04.081Z] [DEBUG] Amnezia LocalSocketController : Connecting to: /var/run/amneziavpn/daemon.socket [2026-05-06 12:08:04.081Z] [DEBUG] Amnezia LocalSocketController : Daemon connected [2026-05-06 12:08:04.081Z] [DEBUG] Amnezia LocalSocketController : Check status [2026-05-06 12:08:04.082Z] [DEBUG] Amnezia LocalSocketController : Reading [2026-05-06 12:08:04.082Z] [DEBUG] Amnezia LocalSocketController : Parse command: status [2026-05-06 12:08:06.775Z] [DEBUG] Amnezia LocalSocketController : Reading [2026-05-06 12:08:06.775Z] [DEBUG] Amnezia LocalSocketController : Parse command: connected [2026-05-06 12:08:06.775Z] [DEBUG] Amnezia LocalSocketController : Handshake completed with: <deleted> [2026-05-06 12:08:06.776Z] [DEBUG] Amnezia LocalSocketController : Check status [2026-05-06 12:08:06.776Z] [DEBUG] Amnezia : VpnProtocol::setConnectionState "Connected" [2026-05-06 12:08:06.776Z] [DEBUG] Amnezia : Connection state: 'Connected' [2026-05-06 12:08:06.783Z] [WARNING] Amnezia : VpnConnection::onConnectionStateChanged: Failed to clear saved routes [2026-05-06 12:08:06.784Z] [DEBUG] Amnezia LocalSocketController : Reading [2026-05-06 12:08:06.784Z] [DEBUG] Amnezia LocalSocketController : Parse command: status ``` ``` [2026-05-06 12:14:49.796Z] [DEBUG] Amnezia : LocalServer new connection [2026-05-06 12:14:49.798Z] [DEBUG] Amnezia DaemonLocalServer : New connection received [2026-05-06 12:14:49.798Z] [DEBUG] Amnezia DaemonLocalServerConnection : Connection created [2026-05-06 12:14:49.799Z] [DEBUG] Amnezia DaemonLocalServerConnection : Read Data [2026-05-06 12:14:49.800Z] [DEBUG] Amnezia DaemonLocalServerConnection : Command received: status [2026-05-06 12:14:49.800Z] [DEBUG] Amnezia Daemon : Status request [2026-05-06 12:14:49.800Z] [DEBUG] Amnezia DaemonLocalServerConnection : Read Data [2026-05-06 12:14:49.800Z] [DEBUG] Amnezia DaemonLocalServerConnection : Command received: activate [2026-05-06 12:14:49.801Z] [DEBUG] Amnezia Daemon : Activating interface [2026-05-06 12:14:49.822Z] [DEBUG] Amnezia WireguardUtilsLinux : Created wireguard interface amn0 [2026-05-06 12:14:49.822Z] [DEBUG] Amnezia LinuxRouteMonitor : LinuxRouteMonitor created. [2026-05-06 12:14:49.840Z] [WARNING] Amnezia LinuxFirewall : ( 2 ) $ iptables -C OUTPUT -j amnvpn.anchors 2> /dev/null [2026-05-06 12:14:50.692Z] [INFO] Amnezia LinuxFirewall : Tearing down cgroup and routing rules [2026-05-06 12:14:50.722Z] [WARNING] Amnezia LinuxFirewall : ( 255 ) $ ip route flush table amnvpnrt [2026-05-06 12:14:50.722Z] [WARNING] Amnezia LinuxFirewall : Error: argument "amnvpnrt" is wrong: table id value is invalid [2026-05-06 12:14:50.731Z] [DEBUG] Amnezia LinuxFirewall : LinuxFirewall::uninstall() complete [2026-05-06 12:14:51.838Z] [WARNING] Amnezia LinuxFirewall : ( 123 ) $ if ! iptables -L OUTPUT -n --line-numbers -t filter 2> /dev/null | awk 'int($1) == 1 && $2 == "amnvpn.anchors" { found=1 } END { if(found==1) { exit 0 } else { exit 1 } }' ; then iptables -I OUTPUT -j amnvpn.anchors -t filter && iptables -L OUTPUT -n --line-numbers -t filter 2> /dev/null | awk 'int($1) > 1 && $2 == "amnvpn.anchors" { print $1; exit }' | xargs iptables -t filter -D OUTPUT ; fi [2026-05-06 12:14:51.838Z] [WARNING] Amnezia LinuxFirewall : iptables: Bad rule (does a matching rule exist in that chain?). [2026-05-06 12:14:51.860Z] [WARNING] Amnezia LinuxFirewall : ( 123 ) $ if ! ip6tables -L OUTPUT -n --line-numbers -t filter 2> /dev/null | awk 'int($1) == 1 && $2 == "amnvpn.anchors" { found=1 } END { if(found==1) { exit 0 } else { exit 1 } }' ; then ip6tables -I OUTPUT -j amnvpn.anchors -t filter && ip6tables -L OUTPUT -n --line-numbers -t filter 2> /dev/null | awk 'int($1) > 1 && $2 == "amnvpn.anchors" { print $1; exit }' | xargs ip6tables -t filter -D OUTPUT ; fi [2026-05-06 12:14:51.860Z] [WARNING] Amnezia LinuxFirewall : ip6tables: Bad rule (does a matching rule exist in that chain?). [2026-05-06 12:14:51.884Z] [WARNING] Amnezia LinuxFirewall : ( 123 ) $ if ! iptables -L POSTROUTING -n --line-numbers -t nat 2> /dev/null | awk 'int($1) == 1 && $2 == "amnvpn.anchors" { found=1 } END { if(found==1) { exit 0 } else { exit 1 } }' ; then iptables -I POSTROUTING -j amnvpn.anchors -t nat && iptables -L POSTROUTING -n --line-numbers -t nat 2> /dev/null | awk 'int($1) > 1 && $2 == "amnvpn.anchors" { print $1; exit }' | xargs iptables -t nat -D POSTROUTING ; fi [2026-05-06 12:14:51.884Z] [WARNING] Amnezia LinuxFirewall : iptables: Bad rule (does a matching rule exist in that chain?). [2026-05-06 12:14:51.907Z] [WARNING] Amnezia LinuxFirewall : ( 123 ) $ if ! ip6tables -L POSTROUTING -n --line-numbers -t nat 2> /dev/null | awk 'int($1) == 1 && $2 == "amnvpn.anchors" { found=1 } END { if(found==1) { exit 0 } else { exit 1 } }' ; then ip6tables -I POSTROUTING -j amnvpn.anchors -t nat && ip6tables -L POSTROUTING -n --line-numbers -t nat 2> /dev/null | awk 'int($1) > 1 && $2 == "amnvpn.anchors" { print $1; exit }' | xargs ip6tables -t nat -D POSTROUTING ; fi [2026-05-06 12:14:51.907Z] [WARNING] Amnezia LinuxFirewall : ip6tables: Bad rule (does a matching rule exist in that chain?). [2026-05-06 12:14:51.929Z] [WARNING] Amnezia LinuxFirewall : ( 123 ) $ if ! iptables -L OUTPUT -n --line-numbers -t mangle 2> /dev/null | awk 'int($1) == 1 && $2 == "amnvpn.anchors" { found=1 } END { if(found==1) { exit 0 } else { exit 1 } }' ; then iptables -I OUTPUT -j amnvpn.anchors -t mangle && iptables -L OUTPUT -n --line-numbers -t mangle 2> /dev/null | awk 'int($1) > 1 && $2 == "amnvpn.anchors" { print $1; exit }' | xargs iptables -t mangle -D OUTPUT ; fi [2026-05-06 12:14:51.929Z] [WARNING] Amnezia LinuxFirewall : iptables: Bad rule (does a matching rule exist in that chain?). [2026-05-06 12:14:51.950Z] [WARNING] Amnezia LinuxFirewall : ( 123 ) $ if ! ip6tables -L OUTPUT -n --line-numbers -t mangle 2> /dev/null | awk 'int($1) == 1 && $2 == "amnvpn.anchors" { found=1 } END { if(found==1) { exit 0 } else { exit 1 } }' ; then ip6tables -I OUTPUT -j amnvpn.anchors -t mangle && ip6tables -L OUTPUT -n --line-numbers -t mangle 2> /dev/null | awk 'int($1) > 1 && $2 == "amnvpn.anchors" { print $1; exit }' | xargs ip6tables -t mangle -D OUTPUT ; fi [2026-05-06 12:14:51.950Z] [WARNING] Amnezia LinuxFirewall : ip6tables: Bad rule (does a matching rule exist in that chain?). [2026-05-06 12:14:51.972Z] [WARNING] Amnezia LinuxFirewall : ( 123 ) $ if ! iptables -L PREROUTING -n --line-numbers -t raw 2> /dev/null | awk 'int($1) == 1 && $2 == "amnvpn.anchors" { found=1 } END { if(found==1) { exit 0 } else { exit 1 } }' ; then iptables -I PREROUTING -j amnvpn.anchors -t raw && iptables -L PREROUTING -n --line-numbers -t raw 2> /dev/null | awk 'int($1) > 1 && $2 == "amnvpn.anchors" { print $1; exit }' | xargs iptables -t raw -D PREROUTING ; fi [2026-05-06 12:14:51.972Z] [WARNING] Amnezia LinuxFirewall : iptables: Bad rule (does a matching rule exist in that chain?). [2026-05-06 12:14:51.994Z] [WARNING] Amnezia LinuxFirewall : ( 123 ) $ if ! ip6tables -L PREROUTING -n --line-numbers -t raw 2> /dev/null | awk 'int($1) == 1 && $2 == "amnvpn.anchors" { found=1 } END { if(found==1) { exit 0 } else { exit 1 } }' ; then ip6tables -I PREROUTING -j amnvpn.anchors -t raw && ip6tables -L PREROUTING -n --line-numbers -t raw 2> /dev/null | awk 'int($1) > 1 && $2 == "amnvpn.anchors" { print $1; exit }' | xargs ip6tables -t raw -D PREROUTING ; fi [2026-05-06 12:14:51.994Z] [WARNING] Amnezia LinuxFirewall : ip6tables: Bad rule (does a matching rule exist in that chain?). [2026-05-06 12:14:51.995Z] [INFO] Amnezia LinuxFirewall : Should be setting up cgroup in /sys/fs/cgroup/net_cls/amnvpnexclusions/ for traffic splitting [2026-05-06 12:14:52.115Z] [WARNING] Amnezia LinuxFirewall : ( 1 ) $ if [ ! -d /sys/fs/cgroup/net_cls/amnvpnexclusions/ ] ; then mkdir /sys/fs/cgroup/net_cls/amnvpnexclusions/ ; sleep 0.1 ; echo 0x567 > /sys/fs/cgroup/net_cls/amnvpnexclusions//net_cls.classid ; fi [2026-05-06 12:14:52.115Z] [WARNING] Amnezia LinuxFirewall : mkdir: No such file or directory /bin/bash: line 1: /sys/fs/cgroup/net_cls/amnvpnexclusions//net_cls.classid: No such file or directory [2026-05-06 12:14:52.130Z] [WARNING] Amnezia LinuxFirewall : ( 255 ) $ if ! ip rule list | grep -q 0x3211 ; then ip rule add from all fwmark 0x3211 lookup amnvpnrt pri 100 ; fi [2026-05-06 12:14:52.130Z] [WARNING] Amnezia LinuxFirewall : Error: argument "amnvpnrt" is wrong: invalid table ID [2026-05-06 12:14:52.162Z] [INFO] Amnezia LinuxFirewall : 000.allowLoopback(IPv4): OFF -> ON [2026-05-06 12:14:52.175Z] [INFO] Amnezia LinuxFirewall : 000.allowLoopback(IPv6): OFF -> ON [2026-05-06 12:14:52.188Z] [INFO] Amnezia LinuxFirewall : 100.blockAll(IPv4): OFF -> ON [2026-05-06 12:14:52.201Z] [INFO] Amnezia LinuxFirewall : 100.blockAll(IPv6): OFF -> ON [2026-05-06 12:14:52.215Z] [INFO] Amnezia LinuxFirewall : 110.allowNets(IPv4): OFF -> ON [2026-05-06 12:14:52.239Z] [INFO] Amnezia LinuxFirewall : 120.blockNets(IPv4): OFF [2026-05-06 12:14:52.260Z] [INFO] Amnezia LinuxFirewall : 200.allowVPN(IPv4): OFF -> ON [2026-05-06 12:14:52.272Z] [INFO] Amnezia LinuxFirewall : 250.blockIPv6(IPv6): OFF -> ON [2026-05-06 12:14:52.286Z] [INFO] Amnezia LinuxFirewall : 290.allowDHCP(IPv4): OFF -> ON [2026-05-06 12:14:52.299Z] [INFO] Amnezia LinuxFirewall : 290.allowDHCP(IPv6): OFF -> ON [2026-05-06 12:14:52.312Z] [INFO] Amnezia LinuxFirewall : 300.allowLAN(IPv4): OFF -> ON [2026-05-06 12:14:52.325Z] [INFO] Amnezia LinuxFirewall : 300.allowLAN(IPv6): OFF -> ON [2026-05-06 12:14:52.338Z] [INFO] Amnezia LinuxFirewall : 310.blockDNS(IPv4): OFF -> ON [2026-05-06 12:14:52.460Z] [INFO] Amnezia LinuxFirewall : 320.allowDNS(IPv4): OFF -> ON [2026-05-06 12:14:52.473Z] [WARNING] Amnezia LinuxFirewall : ( 2 ) $ if iptables -C amnvpn.a.400.allowPIA -j amnvpn.400.allowPIA -t filter 2> /dev/null ; then echo '400.allowPIA(IPv4): ON' ; else echo '400.allowPIA(IPv4): OFF -> ON' ; iptables -A amnvpn.a.400.allowPIA -j amnvpn.400.allowPIA -t filter; fi [2026-05-06 12:14:52.473Z] [INFO] Amnezia LinuxFirewall : 400.allowPIA(IPv4): OFF -> ON [2026-05-06 12:14:52.473Z] [WARNING] Amnezia LinuxFirewall : iptables v1.8.11 (nf_tables): Chain 'amnvpn.400.allowPIA' does not exist Try `iptables -h' or 'iptables --help' for more information. [2026-05-06 12:14:52.486Z] [WARNING] Amnezia LinuxFirewall : ( 2 ) $ if ip6tables -C amnvpn.a.400.allowPIA -j amnvpn.400.allowPIA -t filter 2> /dev/null ; then echo '400.allowPIA(IPv6): ON' ; else echo '400.allowPIA(IPv6): OFF -> ON' ; ip6tables -A amnvpn.a.400.allowPIA -j amnvpn.400.allowPIA -t filter; fi [2026-05-06 12:14:52.486Z] [INFO] Amnezia LinuxFirewall : 400.allowPIA(IPv6): OFF -> ON [2026-05-06 12:14:52.486Z] [WARNING] Amnezia LinuxFirewall : ip6tables v1.8.11 (nf_tables): Chain 'amnvpn.400.allowPIA' does not exist Try `ip6tables -h' or 'ip6tables --help' for more information. [2026-05-06 12:14:52.490Z] [DEBUG] Amnezia LinuxRouteMonitor : Adding exclusion route for <deleted> [2026-05-06 12:14:52.491Z] [DEBUG] Amnezia : Gateway 192.168.1.1 for interface wlp0s20f3 [2026-05-06 12:14:52.492Z] [DEBUG] Amnezia WireguardUtilsLinux : Configuring peer <deleted> [2026-05-06 12:14:52.492Z] [DEBUG] Amnezia LinuxRouteMonitor : Adding exclusion route for <deleted> [2026-05-06 12:14:52.492Z] [DEBUG] Amnezia : Gateway 192.168.1.1 for interface wlp0s20f3 [2026-05-06 12:14:52.493Z] [DEBUG] Amnezia LinuxRouteMonitor : Adding exclusion route for /999999 [2026-05-06 12:14:52.493Z] [WARNING] Amnezia LinuxRouteMonitor : Invalid destination prefix [2026-05-06 12:14:52.497Z] [DEBUG] Amnezia DnsUtilsLinux : Adding DNS resolver 1.1.1.1 via amn0 [2026-05-06 12:14:52.497Z] [DEBUG] Amnezia DnsUtilsLinux : Adding DNS resolver 1.0.0.1 via amn0 [2026-05-06 12:14:52.498Z] [DEBUG] Amnezia LinuxRouteMonitor : Adding route to 0.0.0.0/1 [2026-05-06 12:14:52.500Z] [DEBUG] Amnezia LinuxRouteMonitor : Adding route to 128.0.0.0/1 [2026-05-06 12:14:52.500Z] [DEBUG] Amnezia LinuxRouteMonitor : Adding route to ::/1 [2026-05-06 12:14:52.501Z] [DEBUG] Amnezia LinuxRouteMonitor : Adding route to 8000::/1 [2026-05-06 12:14:52.501Z] [DEBUG] Amnezia Daemon : Connection status: 1 [2026-05-06 12:14:52.534Z] [DEBUG] Amnezia DnsUtilsLinux : Setting DNS domain: XXXXXXXX via amn0 search [2026-05-06 12:14:52.763Z] [DEBUG] Amnezia Daemon : Checking for handshake... [2026-05-06 12:14:52.774Z] [DEBUG] Amnezia Daemon : awaiting<deleted> [2026-05-06 12:14:52.775Z] [DEBUG] Amnezia DaemonLocalServerConnection : Read Data [2026-05-06 12:14:52.775Z] [DEBUG] Amnezia DaemonLocalServerConnection : Command received: status [2026-05-06 12:14:52.775Z] [DEBUG] Amnezia Daemon : Status request [2026-05-06 12:14:52.776Z] [DEBUG] Amnezia DnsUtilsLinux : DnsUtilsLinux created. [2026-05-06 12:14:52.785Z] [DEBUG] Amnezia : No suitable DNS manager found. [2026-05-06 12:14:52.864Z] [DEBUG] Amnezia LinuxNetworkWatcherWorker : Properties changed for interface org.freedesktop.NetworkManager.Device.Wireless [2026-05-06 12:14:52.864Z] [DEBUG] Amnezia LinuxNetworkWatcherWorker : Access point did not changed. Ignoring the changes [2026-05-06 12:14:58.865Z] [DEBUG] Amnezia LinuxNetworkWatcherWorker : Properties changed for interface org.freedesktop.NetworkManager.Device.Wireless [2026-05-06 12:14:58.865Z] [DEBUG] Amnezia LinuxNetworkWatcherWorker : Access point did not changed. Ignoring the changes [2026-05-06 12:15:04.865Z] [DEBUG] Amnezia LinuxNetworkWatcherWorker : Properties changed for interface org.freedesktop.NetworkManager.Device.Wireless [2026-05-06 12:15:04.865Z] [DEBUG] Amnezia LinuxNetworkWatcherWorker : Access point did not changed. Ignoring the changes [2026-05-06 12:15:10.864Z] [DEBUG] Amnezia LinuxNetworkWatcherWorker : Properties changed for interface org.freedesktop.NetworkManager.Device.Wireless [2026-05-06 12:15:10.865Z] [DEBUG] Amnezia LinuxNetworkWatcherWorker : Access point did not changed. Ignoring the changes ``` ``` ip -a 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000 link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo valid_lft forever preferred_lft forever inet6 ::1/128 scope host noprefixroute valid_lft forever preferred_lft forever 2: enp0s31f6: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc fq_codel state DOWN group default qlen 1000 link/ether f8:75:a4:19:aa:6a brd ff:ff:ff:ff:ff:ff altname enxf875a419aa6a 3: wwan0: <POINTOPOINT,NOARP> mtu 1500 qdisc noop state DOWN group default qlen 1000 link/none 4: wlp0s20f3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000 link/ether 4c:1d:96:78:7f:5d brd ff:ff:ff:ff:ff:ff altname wlx4c1d96787f5d inet 192.168.1.102/24 brd 192.168.1.255 scope global dynamic noprefixroute wlp0s20f3 valid_lft 21240sec preferred_lft 21240sec inet6 fdea:33fa:3e70:0:6781:f230:f49f:b2c2/64 scope global temporary dynamic valid_lft 600845sec preferred_lft 81891sec inet6 fdea:33fa:3e70:0:df84:7d9f:b2df:d5b5/64 scope global dynamic mngtmpaddr noprefixroute valid_lft 4289854973sec preferred_lft 4289854973sec inet6 fe80::47a:5e1a:370b:b401/64 scope link noprefixroute valid_lft forever preferred_lft forever 6: docker0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state DOWN group default link/ether 02:42:b8:35:e4:30 brd ff:ff:ff:ff:ff:ff inet 172.17.0.1/16 brd 172.17.255.255 scope global docker0 valid_lft forever preferred_lft forever 7: br-fcdbbf192f74: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state DOWN group default link/ether 02:42:f4:6a:cb:9a brd ff:ff:ff:ff:ff:ff inet 172.18.0.1/16 brd 172.18.255.255 scope global br-fcdbbf192f74 valid_lft forever preferred_lft forever 27: amn0: <POINTOPOINT,PROMISC,NOTRAILERS,UP,LOWER_UP> mtu 1376 qdisc fq_codel state UNKNOWN group default qlen 500 link/none inet 10.8.1.4/32 scope global amn0 valid_lft forever preferred_lft forever inet6 fd58:baa6:dead::1/64 scope global valid_lft forever preferred_lft forever inet6 fe80::74dd:a43a:844e:6e18/64 scope link stable-privacy proto kernel_ll valid_lft forever preferred_lft forever ``` ``` ip route 0.0.0.0/1 dev amn0 metric 1 default via 192.168.1.1 dev wlp0s20f3 proto dhcp src 192.168.1.102 metric 600 128.0.0.0/1 dev amn0 metric 1 172.17.0.0/16 dev docker0 proto kernel scope link src 172.17.0.1 linkdown 172.18.0.0/16 dev br-fcdbbf192f74 proto kernel scope link src 172.18.0.1 linkdown 185.209.161.233 via 192.168.1.1 dev wlp0s20f3 192.168.1.0/24 dev wlp0s20f3 proto kernel scope link src 192.168.1.102 metric 600 ``` **Desktop (please complete the following information):** - OS: Ubuntu - Version 25.10 **Server (please complete the following information):** - OS: Ubuntu - Version 20.04.3 <img width="480" height="270" alt="Image" src="https://github.com/user-attachments/assets/7e2f92b7-76c4-4b10-a7c5-a452282c8444" />
Author
Owner

@cold0zero commented on GitHub (May 20, 2026):

Hi! Everything happens similarly.
Amnezia client 4.8.15.4 (Apr 27 2026)
Ubuntu 24.04.4 LTS

<!-- gh-comment-id:4498453411 --> @cold0zero commented on GitHub (May 20, 2026): Hi! Everything happens similarly. Amnezia client 4.8.15.4 (Apr 27 2026) Ubuntu 24.04.4 LTS
Sign in to join this conversation.
No labels
pull-request
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
amnezia-vpn/amnezia-client#1165
No description provided.