===== MANUAL INCIDENT SUMMARY ===== Observed problem: - github.com and discord.com worked normally. - trakt.tv, cloudflare.com, and 1.1.1.1 failed. - DNS resolution worked. - curl -4 -v https://trakt.tv resolved IPv4 addresses but hung at TCP connection establishment. - ping -c 4 1.1.1.1 returned 100% packet loss. - ping -c 4 8.8.8.8 worked normally. - Same behavior occurred on both Ethernet and Wi-Fi. - A phone on the same Wi-Fi could access trakt.tv normally. - No VPN or tunneling software was in use. Important finding: - Disabling UFW immediately restored connectivity. Temporary fix: sudo ufw disable Permanent fix: sudo ufw reset sudo ufw default deny incoming sudo ufw default allow outgoing sudo ufw enable After reset: - ping 1.1.1.1 worked. - curl https://trakt.tv returned HTTP/2 200. - Connectivity remained fixed after re-enabling UFW. Important limitation: - The broken nftables/UFW runtime state was not captured before reset. - This report mostly shows the working state after reset. - UFW created backup files under /etc/ufw/*.20260610_020518. - No intentional UFW rule modifications were made before the issue occurred. ===== SUMMARY ===== Cloudflare/trakt connectivity was broken while UFW was enabled. Disabling UFW immediately fixed ping 1.1.1.1 and curl https://trakt.tv. After ufw reset + default deny incoming + default allow outgoing + enable, connectivity remained fixed. ===== DATE ===== 2026-06-10T<IPv6>+03:00 ===== OS ===== NAME="CachyOS Linux" PRETTY_NAME="CachyOS" ID=cachyos ID_LIKE=arch BUILD_ID=rolling ANSI_COLOR="38;2;23;147;209" HOME_URL="https://cachyos.org/" DOCUMENTATION_URL="https://wiki.cachyos.org/" SUPPORT_URL="https://discuss.cachyos.org/" BUG_REPORT_URL="https://github.com/cachyos" PRIVACY_POLICY_URL="https://terms.archlinux.org/docs/privacy-policy/" LOGO=cachyos Linux cachyos-x8664 7.0.11-1-cachyos #1 SMP PREEMPT_DYNAMIC Wed, 03 Jun 2026 <IPv6> +0000 x86_64 GNU/Linux ===== PACKAGE VERSIONS ===== ufw 0.36.2-7 nftables 1:1.1.6-3 iptables 1:1.8.13-1.1 networkmanager 1.56.1-1 systemd 260.2-2 linux-cachyos 7.0.11-1 ===== RECENT RELEVANT PACMAN LOGS ===== [2026-05-23T<IPv6>+0300] [ALPM-SCRIPTLET] -> Running build hook: [systemd] [2026-05-23T<IPv6>+0300] [ALPM-SCRIPTLET] ==> Creating zstd-compressed initcpio image: '/boot/initramfs-linux-cachyos-lts.img' [2026-05-23T<IPv6>+0300] [ALPM-SCRIPTLET] ==> Building image from preset: /etc/mkinitcpio.d/linux-cachyos.preset: 'default' [2026-05-23T<IPv6>+0300] [ALPM-SCRIPTLET] -> -k /boot/vmlinuz-linux-cachyos -g /boot/initramfs-linux-cachyos.img [2026-05-23T<IPv6>+0300] [ALPM-SCRIPTLET] -> Running build hook: [systemd] [2026-05-23T<IPv6>+0300] [ALPM-SCRIPTLET] ==> Creating zstd-compressed initcpio image: '/boot/initramfs-linux-cachyos.img' [2026-05-23T<IPv6>+0300] [ALPM] running '30-systemd-daemon-reload-system.hook'... [2026-05-23T<IPv6>+0300] [ALPM] running '30-systemd-daemon-reload-user.hook'... [2026-05-23T<IPv6>+0300] [ALPM] running '35-systemd-enqueue-marked.hook'... [2026-05-23T<IPv6>+0300] [ALPM] running '35-systemd-update.hook'... [2026-05-24T<IPv6>+0300] [ALPM] upgraded linux-cachyos (7.0.9-1 -> 7.0.10-1) [2026-05-24T<IPv6>+0300] [ALPM] upgraded linux-cachyos-headers (7.0.9-1 -> 7.0.10-1) [2026-05-24T<IPv6>+0300] [ALPM] upgraded linux-cachyos-lts (6.18.32-1 -> 6.18.33-1) [2026-05-24T<IPv6>+0300] [ALPM] upgraded linux-cachyos-lts-headers (6.18.32-1 -> 6.18.33-1) [2026-05-24T<IPv6>+0300] [ALPM] upgraded linux-cachyos-lts-nvidia-open (6.18.32-1 -> 6.18.33-1) [2026-05-24T<IPv6>+0300] [ALPM] upgraded linux-cachyos-nvidia-open (7.0.9-1 -> 7.0.10-1) [2026-05-24T<IPv6>+0300] [ALPM] running '35-systemd-udev-reload.hook'... [2026-05-24T<IPv6>+0300] [ALPM] running '35-systemd-update.hook'... [2026-05-24T<IPv6>+0300] [ALPM-SCRIPTLET] ==> Building image from preset: /etc/mkinitcpio.d/linux-cachyos-lts.preset: 'default' [2026-05-24T<IPv6>+0300] [ALPM-SCRIPTLET] -> -k /boot/vmlinuz-linux-cachyos-lts -g /boot/initramfs-linux-cachyos-lts.img [2026-05-24T<IPv6>+0300] [ALPM-SCRIPTLET] -> Running build hook: [systemd] [2026-05-24T<IPv6>+0300] [ALPM-SCRIPTLET] ==> Creating zstd-compressed initcpio image: '/boot/initramfs-linux-cachyos-lts.img' [2026-05-24T<IPv6>+0300] [ALPM-SCRIPTLET] ==> Building image from preset: /etc/mkinitcpio.d/linux-cachyos.preset: 'default' [2026-05-24T<IPv6>+0300] [ALPM-SCRIPTLET] -> -k /boot/vmlinuz-linux-cachyos -g /boot/initramfs-linux-cachyos.img [2026-05-24T<IPv6>+0300] [ALPM-SCRIPTLET] -> Running build hook: [systemd] [2026-05-24T<IPv6>+0300] [ALPM-SCRIPTLET] ==> Creating zstd-compressed initcpio image: '/boot/initramfs-linux-cachyos.img' [2026-05-24T<IPv6>+0300] [ALPM-SCRIPTLET] Found linux image: /boot/vmlinuz-linux-cachyos [2026-05-24T<IPv6>+0300] [ALPM-SCRIPTLET] Found initrd image: /boot/initramfs-linux-cachyos.img [2026-05-24T<IPv6>+0300] [ALPM-SCRIPTLET] Found linux image: /boot/vmlinuz-linux-cachyos-lts [2026-05-24T<IPv6>+0300] [ALPM-SCRIPTLET] Found initrd image: /boot/initramfs-linux-cachyos-lts.img [2026-05-24T<IPv6>+0300] [ALPM-SCRIPTLET] Created symlink '/etc/systemd/system/dbus-org.rnd2.cpupower_gui.helper.service' → '/usr/lib/systemd/system/cpupower-gui-helper.service'. [2026-05-24T<IPv6>+0300] [ALPM-SCRIPTLET] Created symlink '/etc/systemd/system/multi-user.target.wants/cpupower-gui.service' → '/usr/lib/systemd/system/cpupower-gui.service'. [2026-05-24T<IPv6>+0300] [ALPM] running '30-systemd-daemon-reload-system.hook'... [2026-05-24T<IPv6>+0300] [ALPM] running '30-systemd-daemon-reload-user.hook'... [2026-05-24T<IPv6>+0300] [ALPM] running '35-systemd-update.hook'... [2026-05-24T<IPv6>+0300] [ALPM] running '30-systemd-daemon-reload-system.hook'... [2026-05-24T<IPv6>+0300] [ALPM] running '35-systemd-enqueue-marked.hook'... [2026-05-24T<IPv6>+0300] [ALPM] running '35-systemd-update.hook'... [2026-05-25T<IPv6>+0300] [ALPM] running '30-systemd-daemon-reload-user.hook'... [2026-05-25T<IPv6>+0300] [ALPM] running '35-systemd-udev-reload.hook'... [2026-05-25T<IPv6>+0300] [ALPM] running '35-systemd-update.hook'... [2026-05-27T<IPv6>+0300] [ALPM] upgraded cachyos-kernel-manager (1.18.0-1 -> 1.18.1-1) [2026-05-27T<IPv6>+0300] [ALPM] running '30-systemd-daemon-reload-user.hook'... [2026-05-27T<IPv6>+0300] [ALPM] running '35-systemd-update.hook'... [2026-05-27T<IPv6>+0300] [ALPM] running '35-systemd-update.hook'... [2026-05-27T<IPv6>+0300] [ALPM-SCRIPTLET] ==> Building image from preset: /etc/mkinitcpio.d/linux-cachyos-lts.preset: 'default' [2026-05-27T<IPv6>+0300] [ALPM-SCRIPTLET] -> -k /boot/vmlinuz-linux-cachyos-lts -g /boot/initramfs-linux-cachyos-lts.img [2026-05-27T<IPv6>+0300] [ALPM-SCRIPTLET] -> Running build hook: [systemd] [2026-05-27T<IPv6>+0300] [ALPM-SCRIPTLET] ==> Creating zstd-compressed initcpio image: '/boot/initramfs-linux-cachyos-lts.img' [2026-05-27T<IPv6>+0300] [ALPM-SCRIPTLET] ==> Building image from preset: /etc/mkinitcpio.d/linux-cachyos.preset: 'default' [2026-05-27T<IPv6>+0300] [ALPM-SCRIPTLET] -> -k /boot/vmlinuz-linux-cachyos -g /boot/initramfs-linux-cachyos.img [2026-05-27T<IPv6>+0300] [ALPM-SCRIPTLET] -> Running build hook: [systemd] [2026-05-27T<IPv6>+0300] [ALPM-SCRIPTLET] ==> Creating zstd-compressed initcpio image: '/boot/initramfs-linux-cachyos.img' [2026-05-27T<IPv6>+0300] [ALPM] running '30-systemd-daemon-reload-user.hook'... [2026-05-27T<IPv6>+0300] [ALPM] running '35-systemd-udev-reload.hook'... [2026-05-27T<IPv6>+0300] [ALPM] running '35-systemd-update.hook'... [2026-05-28T<IPv6>+0300] [ALPM] upgraded systemd-libs (260.1-2 -> 260.2-2) [2026-05-28T<IPv6>+0300] [ALPM] upgraded systemd (260.1-2 -> 260.2-2) [2026-05-28T<IPv6>+0300] [ALPM] upgraded lib32-systemd (260.1-1 -> 260.2-1) [2026-05-28T<IPv6>+0300] [ALPM] upgraded systemd-resolvconf (260.1-2 -> 260.2-2) [2026-05-28T<IPv6>+0300] [ALPM] upgraded systemd-sysvcompat (260.1-2 -> 260.2-2) [2026-05-28T<IPv6>+0300] [ALPM] running '20-systemd-sysusers.hook'... [2026-05-28T<IPv6>+0300] [ALPM] running '21-systemd-tmpfiles.hook'... [2026-05-28T<IPv6>+0300] [ALPM] running '25-systemd-catalog.hook'... [2026-05-28T<IPv6>+0300] [ALPM] running '25-systemd-hwdb.hook'... [2026-05-28T<IPv6>+0300] [ALPM] running '25-systemd-sysctl.hook'... [2026-05-28T<IPv6>+0300] [ALPM] running '30-systemd-daemon-reload-system.hook'... [2026-05-28T<IPv6>+0300] [ALPM] running '30-systemd-daemon-reload-user.hook'... [2026-05-28T<IPv6>+0300] [ALPM] running '35-systemd-enqueue-marked.hook'... [2026-05-28T<IPv6>+0300] [ALPM] running '35-systemd-udev-reload.hook'... [2026-05-28T<IPv6>+0300] [ALPM] running '35-systemd-update.hook'... [2026-05-28T<IPv6>+0300] [ALPM-SCRIPTLET] ==> Building image from preset: /etc/mkinitcpio.d/linux-cachyos-lts.preset: 'default' [2026-05-28T<IPv6>+0300] [ALPM-SCRIPTLET] -> -k /boot/vmlinuz-linux-cachyos-lts -g /boot/initramfs-linux-cachyos-lts.img [2026-05-28T<IPv6>+0300] [ALPM-SCRIPTLET] -> Running build hook: [systemd] [2026-05-28T<IPv6>+0300] [ALPM-SCRIPTLET] ==> Creating zstd-compressed initcpio image: '/boot/initramfs-linux-cachyos-lts.img' [2026-05-28T<IPv6>+0300] [ALPM-SCRIPTLET] ==> Building image from preset: /etc/mkinitcpio.d/linux-cachyos.preset: 'default' [2026-05-28T<IPv6>+0300] [ALPM-SCRIPTLET] -> -k /boot/vmlinuz-linux-cachyos -g /boot/initramfs-linux-cachyos.img [2026-05-28T<IPv6>+0300] [ALPM-SCRIPTLET] -> Running build hook: [systemd] [2026-05-28T<IPv6>+0300] [ALPM-SCRIPTLET] ==> Creating zstd-compressed initcpio image: '/boot/initramfs-linux-cachyos.img' [2026-05-28T<IPv6>+0300] [ALPM] running '35-systemd-update.hook'... [2026-05-28T<IPv6>+0300] [ALPM] running '35-systemd-update.hook'... [2026-05-28T<IPv6>+0300] [ALPM-SCRIPTLET] ==> Building image from preset: /etc/mkinitcpio.d/linux-cachyos-lts.preset: 'default' [2026-05-28T<IPv6>+0300] [ALPM-SCRIPTLET] -> -k /boot/vmlinuz-linux-cachyos-lts -g /boot/initramfs-linux-cachyos-lts.img [2026-05-28T<IPv6>+0300] [ALPM-SCRIPTLET] -> Running build hook: [systemd] [2026-05-28T<IPv6>+0300] [ALPM-SCRIPTLET] ==> Creating zstd-compressed initcpio image: '/boot/initramfs-linux-cachyos-lts.img' [2026-05-28T<IPv6>+0300] [ALPM-SCRIPTLET] ==> Building image from preset: /etc/mkinitcpio.d/linux-cachyos.preset: 'default' [2026-05-28T<IPv6>+0300] [ALPM-SCRIPTLET] -> -k /boot/vmlinuz-linux-cachyos -g /boot/initramfs-linux-cachyos.img [2026-05-28T<IPv6>+0300] [ALPM-SCRIPTLET] -> Running build hook: [systemd] [2026-05-28T<IPv6>+0300] [ALPM-SCRIPTLET] ==> Creating zstd-compressed initcpio image: '/boot/initramfs-linux-cachyos.img' [2026-05-30T<IPv6>+0300] [ALPM] upgraded linux-cachyos (7.0.10-1 -> 7.0.10-2) [2026-05-30T<IPv6>+0300] [ALPM] upgraded linux-cachyos-headers (7.0.10-1 -> 7.0.10-2) [2026-05-30T<IPv6>+0300] [ALPM] upgraded linux-cachyos-lts (6.18.33-1 -> 6.18.33-2) [2026-05-30T<IPv6>+0300] [ALPM] upgraded linux-cachyos-lts-headers (6.18.33-1 -> 6.18.33-2) [2026-05-30T<IPv6>+0300] [ALPM] upgraded linux-cachyos-lts-nvidia-open (6.18.33-1 -> 6.18.33-2) [2026-05-30T<IPv6>+0300] [ALPM] upgraded linux-cachyos-nvidia-open (7.0.10-1 -> 7.0.10-2) [2026-05-30T<IPv6>+0300] [ALPM] running '20-systemd-sysusers.hook'... [2026-05-30T<IPv6>+0300] [ALPM] running '30-systemd-daemon-reload-system.hook'... [2026-05-30T<IPv6>+0300] [ALPM] running '35-systemd-enqueue-marked.hook'... [2026-05-30T<IPv6>+0300] [ALPM] running '35-systemd-udev-reload.hook'... [2026-05-30T<IPv6>+0300] [ALPM] running '35-systemd-update.hook'... [2026-05-30T<IPv6>+0300] [ALPM-SCRIPTLET] ==> Building image from preset: /etc/mkinitcpio.d/linux-cachyos-lts.preset: 'default' [2026-05-30T<IPv6>+0300] [ALPM-SCRIPTLET] -> -k /boot/vmlinuz-linux-cachyos-lts -g /boot/initramfs-linux-cachyos-lts.img [2026-05-30T<IPv6>+0300] [ALPM-SCRIPTLET] -> Running build hook: [systemd] [2026-05-30T<IPv6>+0300] [ALPM-SCRIPTLET] ==> Creating zstd-compressed initcpio image: '/boot/initramfs-linux-cachyos-lts.img' [2026-05-30T<IPv6>+0300] [ALPM-SCRIPTLET] ==> Building image from preset: /etc/mkinitcpio.d/linux-cachyos.preset: 'default' [2026-05-30T<IPv6>+0300] [ALPM-SCRIPTLET] -> -k /boot/vmlinuz-linux-cachyos -g /boot/initramfs-linux-cachyos.img [2026-05-30T<IPv6>+0300] [ALPM-SCRIPTLET] -> Running build hook: [systemd] [2026-05-30T<IPv6>+0300] [ALPM-SCRIPTLET] ==> Creating zstd-compressed initcpio image: '/boot/initramfs-linux-cachyos.img' [2026-05-30T<IPv6>+0300] [ALPM-SCRIPTLET] Found linux image: /boot/vmlinuz-linux-cachyos [2026-05-30T<IPv6>+0300] [ALPM-SCRIPTLET] Found initrd image: /boot/initramfs-linux-cachyos.img [2026-05-30T<IPv6>+0300] [ALPM-SCRIPTLET] Found linux image: /boot/vmlinuz-linux-cachyos-lts [2026-05-30T<IPv6>+0300] [ALPM-SCRIPTLET] Found initrd image: /boot/initramfs-linux-cachyos-lts.img [2026-05-30T<IPv6>+0300] [ALPM] running '21-systemd-tmpfiles.hook'... [2026-05-30T<IPv6>+0300] [ALPM] running '30-systemd-daemon-reload-system.hook'... [2026-05-30T<IPv6>+0300] [ALPM] running '35-systemd-enqueue-marked.hook'... [2026-05-30T<IPv6>+0300] [ALPM] running '35-systemd-update.hook'... [2026-05-30T<IPv6>+0300] [ALPM-SCRIPTLET] ==> Building image from preset: /etc/mkinitcpio.d/linux-cachyos-lts.preset: 'default' [2026-05-30T<IPv6>+0300] [ALPM-SCRIPTLET] -> -k /boot/vmlinuz-linux-cachyos-lts -g /boot/initramfs-linux-cachyos-lts.img [2026-05-30T<IPv6>+0300] [ALPM-SCRIPTLET] -> Running build hook: [systemd] [2026-05-30T<IPv6>+0300] [ALPM-SCRIPTLET] ==> Creating zstd-compressed initcpio image: '/boot/initramfs-linux-cachyos-lts.img' [2026-05-30T<IPv6>+0300] [ALPM-SCRIPTLET] ==> Building image from preset: /etc/mkinitcpio.d/linux-cachyos.preset: 'default' [2026-05-30T<IPv6>+0300] [ALPM-SCRIPTLET] -> -k /boot/vmlinuz-linux-cachyos -g /boot/initramfs-linux-cachyos.img [2026-05-30T<IPv6>+0300] [ALPM-SCRIPTLET] -> Running build hook: [systemd] [2026-05-30T<IPv6>+0300] [ALPM-SCRIPTLET] ==> Creating zstd-compressed initcpio image: '/boot/initramfs-linux-cachyos.img' [2026-05-31T<IPv6>+0300] [ALPM] running '21-systemd-tmpfiles.hook'... [2026-05-31T<IPv6>+0300] [ALPM] running '25-systemd-binfmt.hook'... [2026-05-31T<IPv6>+0300] [ALPM] running '30-systemd-daemon-reload-user.hook'... [2026-05-31T<IPv6>+0300] [ALPM] running '35-systemd-update.hook'... [2026-05-31T<IPv6>+0300] [ALPM] running '25-systemd-hwdb.hook'... [2026-05-31T<IPv6>+0300] [ALPM] running '35-systemd-udev-reload.hook'... [2026-05-31T<IPv6>+0300] [ALPM] running '35-systemd-update.hook'... [2026-05-31T<IPv6>+0300] [ALPM] running '35-systemd-update.hook'... [2026-06-01T<IPv6>+0300] [ALPM] running '35-systemd-update.hook'... [2026-06-02T<IPv6>+0300] [ALPM] running '35-systemd-update.hook'... [2026-06-02T<IPv6>+0300] [ALPM] running '35-systemd-update.hook'... [2026-06-03T<IPv6>+0300] [ALPM] running '20-systemd-sysusers.hook'... [2026-06-03T<IPv6>+0300] [ALPM] running '21-systemd-tmpfiles.hook'... [2026-06-03T<IPv6>+0300] [ALPM] running '25-systemd-hwdb.hook'... [2026-06-03T<IPv6>+0300] [ALPM] running '30-systemd-daemon-reload-system.hook'... [2026-06-03T<IPv6>+0300] [ALPM] running '35-systemd-enqueue-marked.hook'... [2026-06-03T<IPv6>+0300] [ALPM] running '35-systemd-udev-reload.hook'... [2026-06-03T<IPv6>+0300] [ALPM] running '35-systemd-update.hook'... [2026-06-03T<IPv6>+0300] [ALPM] running '30-systemd-daemon-reload-system.hook'... [2026-06-03T<IPv6>+0300] [ALPM] running '35-systemd-enqueue-marked.hook'... [2026-06-03T<IPv6>+0300] [ALPM] running '35-systemd-update.hook'... [2026-06-03T<IPv6>+0300] [ALPM] running '35-systemd-update.hook'... [2026-06-03T<IPv6>+0300] [ALPM-SCRIPTLET] ==> Building image from preset: /etc/mkinitcpio.d/linux-cachyos-lts.preset: 'default' [2026-06-03T<IPv6>+0300] [ALPM-SCRIPTLET] -> -k /boot/vmlinuz-linux-cachyos-lts -g /boot/initramfs-linux-cachyos-lts.img [2026-06-03T<IPv6>+0300] [ALPM-SCRIPTLET] -> Running build hook: [systemd] [2026-06-03T<IPv6>+0300] [ALPM-SCRIPTLET] ==> Creating zstd-compressed initcpio image: '/boot/initramfs-linux-cachyos-lts.img' [2026-06-03T<IPv6>+0300] [ALPM-SCRIPTLET] ==> Building image from preset: /etc/mkinitcpio.d/linux-cachyos.preset: 'default' [2026-06-03T<IPv6>+0300] [ALPM-SCRIPTLET] -> -k /boot/vmlinuz-linux-cachyos -g /boot/initramfs-linux-cachyos.img [2026-06-03T<IPv6>+0300] [ALPM-SCRIPTLET] -> Running build hook: [systemd] [2026-06-03T<IPv6>+0300] [ALPM-SCRIPTLET] ==> Creating zstd-compressed initcpio image: '/boot/initramfs-linux-cachyos.img' [2026-06-03T<IPv6>+0300] [ALPM] running '30-systemd-daemon-reload-system.hook'... [2026-06-03T<IPv6>+0300] [ALPM] running '35-systemd-enqueue-marked.hook'... [2026-06-03T<IPv6>+0300] [ALPM] running '35-systemd-update.hook'... [2026-06-04T<IPv6>+0300] [ALPM] running '21-systemd-tmpfiles.hook'... [2026-06-04T<IPv6>+0300] [ALPM] running '30-systemd-daemon-reload-system.hook'... [2026-06-04T<IPv6>+0300] [ALPM] running '35-systemd-enqueue-marked.hook'... [2026-06-04T<IPv6>+0300] [ALPM] running '35-systemd-udev-reload.hook'... [2026-06-04T<IPv6>+0300] [ALPM] running '35-systemd-update.hook'... [2026-06-04T<IPv6>+0300] [ALPM-SCRIPTLET] ==> Building image from preset: /etc/mkinitcpio.d/linux-cachyos-lts.preset: 'default' [2026-06-04T<IPv6>+0300] [ALPM-SCRIPTLET] -> -k /boot/vmlinuz-linux-cachyos-lts -g /boot/initramfs-linux-cachyos-lts.img [2026-06-04T<IPv6>+0300] [ALPM-SCRIPTLET] -> Running build hook: [systemd] [2026-06-04T<IPv6>+0300] [ALPM-SCRIPTLET] ==> Creating zstd-compressed initcpio image: '/boot/initramfs-linux-cachyos-lts.img' [2026-06-04T<IPv6>+0300] [ALPM-SCRIPTLET] ==> Building image from preset: /etc/mkinitcpio.d/linux-cachyos.preset: 'default' [2026-06-04T<IPv6>+0300] [ALPM-SCRIPTLET] -> -k /boot/vmlinuz-linux-cachyos -g /boot/initramfs-linux-cachyos.img [2026-06-04T<IPv6>+0300] [ALPM-SCRIPTLET] -> Running build hook: [systemd] [2026-06-04T<IPv6>+0300] [ALPM-SCRIPTLET] ==> Creating zstd-compressed initcpio image: '/boot/initramfs-linux-cachyos.img' [2026-06-04T<IPv6>+0300] [ALPM] running '35-systemd-update.hook'... [2026-06-05T<IPv6>+0300] [ALPM] upgraded linux-cachyos (7.0.10-2 -> 7.0.11-1) [2026-06-05T<IPv6>+0300] [ALPM] upgraded linux-cachyos-headers (7.0.10-2 -> 7.0.11-1) [2026-06-05T<IPv6>+0300] [ALPM] upgraded linux-cachyos-nvidia-open (7.0.10-2 -> 7.0.11-1) [2026-06-05T<IPv6>+0300] [ALPM] running '20-systemd-sysusers.hook'... [2026-06-05T<IPv6>+0300] [ALPM] running '30-systemd-daemon-reload-system.hook'... [2026-06-05T<IPv6>+0300] [ALPM] running '30-systemd-daemon-reload-user.hook'... [2026-06-05T<IPv6>+0300] [ALPM] running '35-systemd-enqueue-marked.hook'... [2026-06-05T<IPv6>+0300] [ALPM] running '35-systemd-udev-reload.hook'... [2026-06-05T<IPv6>+0300] [ALPM] running '35-systemd-update.hook'... [2026-06-05T<IPv6>+0300] [ALPM-SCRIPTLET] ==> Building image from preset: /etc/mkinitcpio.d/linux-cachyos.preset: 'default' [2026-06-05T<IPv6>+0300] [ALPM-SCRIPTLET] -> -k /boot/vmlinuz-linux-cachyos -g /boot/initramfs-linux-cachyos.img [2026-06-05T<IPv6>+0300] [ALPM-SCRIPTLET] -> Running build hook: [systemd] [2026-06-05T<IPv6>+0300] [ALPM-SCRIPTLET] ==> Creating zstd-compressed initcpio image: '/boot/initramfs-linux-cachyos.img' [2026-06-05T<IPv6>+0300] [ALPM-SCRIPTLET] Found linux image: /boot/vmlinuz-linux-cachyos [2026-06-05T<IPv6>+0300] [ALPM-SCRIPTLET] Found initrd image: /boot/initramfs-linux-cachyos.img [2026-06-05T<IPv6>+0300] [ALPM-SCRIPTLET] Found linux image: /boot/vmlinuz-linux-cachyos-lts [2026-06-05T<IPv6>+0300] [ALPM-SCRIPTLET] Found initrd image: /boot/initramfs-linux-cachyos-lts.img [2026-06-06T<IPv6>+0300] [ALPM] running '35-systemd-update.hook'... [2026-06-07T<IPv6>+0300] [ALPM] running '35-systemd-update.hook'... [2026-06-08T<IPv6>+0300] [ALPM] running '35-systemd-update.hook'... [2026-06-08T<IPv6>+0300] [ALPM] running '35-systemd-update.hook'... [2026-06-08T<IPv6>+0300] [ALPM] running '35-systemd-update.hook'... [2026-06-08T<IPv6>+0300] [ALPM] running '35-systemd-update.hook'... [2026-06-08T<IPv6>+0300] [ALPM] running '30-systemd-daemon-reload-user.hook'... [2026-06-08T<IPv6>+0300] [ALPM] running '35-systemd-update.hook'... [2026-06-09T<IPv6>+0300] [ALPM] running '30-systemd-daemon-reload-system.hook'... [2026-06-09T<IPv6>+0300] [ALPM] running '30-systemd-daemon-reload-user.hook'... [2026-06-09T<IPv6>+0300] [ALPM] running '35-systemd-enqueue-marked.hook'... [2026-06-09T<IPv6>+0300] [ALPM] running '35-systemd-update.hook'... ===== UFW STATUS ===== Status: active Logging: on (low) Default: deny (incoming), allow (outgoing), disabled (routed) New profiles: skip Status: active ● ufw.service - CLI Netfilter Manager Loaded: loaded (/usr/lib/systemd/system/ufw.service; enabled; preset: disabled) Active: active (exited) since Wed 2026-06-10 <IPv6> IDT; 42min ago Invocation: b253bf7b0f3a44849913ac68f7e0be98 Process: 385 ExecStart=/usr/lib/ufw/ufw-init start (code=exited, status=0/SUCCESS) Main PID: 385 (code=exited, status=0/SUCCESS) Mem peak: 4.4M CPU: 33ms Jun 10 <IPv6> cachyos-x8664 systemd[1]: Starting CLI Netfilter Manager... Jun 10 <IPv6> cachyos-x8664 systemd[1]: Finished CLI Netfilter Manager. ===== NFTABLES ===== # Warning: table ip filter is managed by iptables-nft, do not touch! table ip filter { chain ufw-before-logging-input { } chain ufw-before-logging-output { } chain ufw-before-logging-forward { } chain ufw-before-input { iifname "lo" counter packets 70 bytes 11293 accept xt match "conntrack" counter packets 52333 bytes 11730354 accept xt match "conntrack" counter packets 23 bytes 2452 jump ufw-logging-deny xt match "conntrack" counter packets 23 bytes 2452 drop ip protocol icmp xt match "icmp" counter packets 0 bytes 0 accept ip protocol icmp xt match "icmp" counter packets 0 bytes 0 accept ip protocol icmp xt match "icmp" counter packets 0 bytes 0 accept ip protocol icmp xt match "icmp" counter packets 0 bytes 0 accept udp sport 67 udp dport 68 counter packets 0 bytes 0 accept counter packets 178 bytes 27933 jump ufw-not-local ip daddr 224.0.0.251 udp dport 5353 counter packets 12 bytes 1116 accept ip daddr 239.255.255.250 udp dport 1900 counter packets 0 bytes 0 accept counter packets 166 bytes 26817 jump ufw-user-input } chain ufw-before-output { oifname "lo" counter packets 70 bytes 11293 accept xt match "conntrack" counter packets 44571 bytes 25924611 accept counter packets 42787 bytes 2863777 jump ufw-user-output } chain ufw-before-forward { xt match "conntrack" counter packets 0 bytes 0 accept ip protocol icmp xt match "icmp" counter packets 0 bytes 0 accept ip protocol icmp xt match "icmp" counter packets 0 bytes 0 accept ip protocol icmp xt match "icmp" counter packets 0 bytes 0 accept ip protocol icmp xt match "icmp" counter packets 0 bytes 0 accept counter packets 0 bytes 0 jump ufw-user-forward } chain ufw-after-input { udp dport 137 counter packets 0 bytes 0 jump ufw-skip-to-policy-input udp dport 138 counter packets 0 bytes 0 jump ufw-skip-to-policy-input tcp dport 139 counter packets 0 bytes 0 jump ufw-skip-to-policy-input tcp dport 445 counter packets 0 bytes 0 jump ufw-skip-to-policy-input udp dport 67 counter packets 0 bytes 0 jump ufw-skip-to-policy-input udp dport 68 counter packets 0 bytes 0 jump ufw-skip-to-policy-input xt match "addrtype" counter packets 2 bytes 1866 jump ufw-skip-to-policy-input } chain ufw-after-output { } chain ufw-after-forward { } chain ufw-after-logging-input { limit rate 3/minute burst 10 packets counter packets 53 bytes 7358 xt target "LOG" } chain ufw-after-logging-output { } chain ufw-after-logging-forward { limit rate 3/minute burst 10 packets counter packets 0 bytes 0 xt target "LOG" } chain ufw-reject-input { } chain ufw-reject-output { } chain ufw-reject-forward { } chain ufw-track-input { } chain ufw-track-output { ip protocol tcp xt match "conntrack" counter packets 38317 bytes 2317937 accept ip protocol udp xt match "conntrack" counter packets 4445 bytes 544508 accept } chain ufw-track-forward { } chain INPUT { type filter hook input priority filter; policy drop; counter packets 103538 bytes 38349702 jump ufw-before-logging-input counter packets 103538 bytes 38349702 jump ufw-before-input counter packets 4468 bytes 3562129 jump ufw-after-input counter packets 4434 bytes 3528804 jump ufw-after-logging-input counter packets 4434 bytes 3528804 jump ufw-reject-input counter packets 4434 bytes 3528804 jump ufw-track-input } chain OUTPUT { type filter hook output priority filter; policy accept; counter packets 267149 bytes 53999594 jump ufw-before-logging-output counter packets 267149 bytes 53999594 jump ufw-before-output counter packets 186007 bytes 13791053 jump ufw-after-output counter packets 186007 bytes 13791053 jump ufw-after-logging-output counter packets 186007 bytes 13791053 jump ufw-reject-output counter packets 186007 bytes 13791053 jump ufw-track-output } chain FORWARD { type filter hook forward priority filter; policy drop; counter packets 0 bytes 0 jump ufw-before-logging-forward counter packets 0 bytes 0 jump ufw-before-forward counter packets 0 bytes 0 jump ufw-after-forward counter packets 0 bytes 0 jump ufw-after-logging-forward counter packets 0 bytes 0 jump ufw-reject-forward counter packets 0 bytes 0 jump ufw-track-forward } chain ufw-logging-deny { xt match "conntrack" limit rate 3/minute burst 10 packets counter packets 23 bytes 2452 return limit rate 3/minute burst 10 packets counter packets 0 bytes 0 xt target "LOG" } chain ufw-logging-allow { limit rate 3/minute burst 10 packets counter packets 0 bytes 0 xt target "LOG" } chain ufw-skip-to-policy-input { counter packets 2 bytes 1866 drop } chain ufw-skip-to-policy-output { counter packets 0 bytes 0 accept } chain ufw-skip-to-policy-forward { counter packets 0 bytes 0 drop } chain ufw-not-local { xt match "addrtype" counter packets 19 bytes 2067 return xt match "addrtype" counter packets 157 bytes 24000 return xt match "addrtype" counter packets 2 bytes 1866 return limit rate 3/minute burst 10 packets counter packets 0 bytes 0 jump ufw-logging-deny counter packets 0 bytes 0 drop } chain ufw-user-input { } chain ufw-user-output { } chain ufw-user-forward { } chain ufw-user-logging-input { } chain ufw-user-logging-output { } chain ufw-user-logging-forward { } chain ufw-user-limit { limit rate 3/minute burst 5 packets counter packets 0 bytes 0 xt target "LOG" counter packets 0 bytes 0 xt target "REJECT" } chain ufw-user-limit-accept { counter packets 0 bytes 0 accept } } # Warning: table ip6 filter is managed by iptables-nft, do not touch! table ip6 filter { chain ufw6-before-logging-input { } chain ufw6-before-logging-output { } chain ufw6-before-logging-forward { } chain ufw6-before-input { iifname "lo" counter packets 0 bytes 0 accept xt match "rt" counter packets 0 bytes 0 drop xt match "conntrack" counter packets 76 bytes 9728 accept meta l4proto ipv6-icmp xt match "icmp6" counter packets 0 bytes 0 accept xt match "conntrack" counter packets 0 bytes 0 jump ufw6-logging-deny xt match "conntrack" counter packets 0 bytes 0 drop meta l4proto ipv6-icmp xt match "icmp6" counter packets 0 bytes 0 accept meta l4proto ipv6-icmp xt match "icmp6" counter packets 0 bytes 0 accept meta l4proto ipv6-icmp xt match "icmp6" counter packets 0 bytes 0 accept meta l4proto ipv6-icmp xt match "icmp6" counter packets 0 bytes 0 accept meta l4proto ipv6-icmp xt match "icmp6" counter packets 0 bytes 0 accept meta l4proto ipv6-icmp xt match "icmp6" xt match "hl" counter packets 0 bytes 0 accept meta l4proto ipv6-icmp xt match "icmp6" xt match "hl" counter packets 114 bytes 10944 accept meta l4proto ipv6-icmp xt match "icmp6" xt match "hl" counter packets 11 bytes 792 accept meta l4proto ipv6-icmp xt match "icmp6" xt match "hl" counter packets 11 bytes 704 accept meta l4proto ipv6-icmp xt match "icmp6" xt match "hl" counter packets 0 bytes 0 accept meta l4proto ipv6-icmp xt match "icmp6" xt match "hl" counter packets 0 bytes 0 accept ip6 saddr fe80::/10 meta l4proto ipv6-icmp xt match "icmp6" counter packets 7 bytes 532 accept ip6 saddr fe80::/10 meta l4proto ipv6-icmp xt match "icmp6" counter packets 0 bytes 0 accept ip6 saddr fe80::/10 meta l4proto ipv6-icmp xt match "icmp6" counter packets 0 bytes 0 accept ip6 saddr fe80::/10 meta l4proto ipv6-icmp xt match "icmp6" counter packets 0 bytes 0 accept meta l4proto ipv6-icmp xt match "icmp6" xt match "hl" counter packets 0 bytes 0 accept meta l4proto ipv6-icmp xt match "icmp6" xt match "hl" counter packets 0 bytes 0 accept ip6 saddr fe80::/10 meta l4proto ipv6-icmp xt match "icmp6" xt match "hl" counter packets 0 bytes 0 accept ip6 saddr fe80::/10 meta l4proto ipv6-icmp xt match "icmp6" xt match "hl" counter packets 0 bytes 0 accept ip6 saddr fe80::/10 meta l4proto ipv6-icmp xt match "icmp6" xt match "hl" counter packets 0 bytes 0 accept meta l4proto ipv6-icmp xt match "icmp6" counter packets 0 bytes 0 accept meta l4proto ipv6-icmp xt match "icmp6" counter packets 0 bytes 0 accept meta l4proto ipv6-icmp xt match "icmp6" counter packets 0 bytes 0 accept meta l4proto ipv6-icmp xt match "icmp6" counter packets 0 bytes 0 accept ip6 saddr fe80::/10 ip6 daddr fe80::/10 udp sport 547 udp dport 546 counter packets 0 bytes 0 accept ip6 daddr ff02::fb udp dport 5353 counter packets 12 bytes 1356 accept ip6 daddr ff02::f udp dport 1900 counter packets 0 bytes 0 accept counter packets 207 bytes 38502 jump ufw6-user-input } chain ufw6-before-output { oifname "lo" counter packets 0 bytes 0 accept xt match "rt" counter packets 0 bytes 0 drop xt match "conntrack" counter packets 0 bytes 0 accept meta l4proto ipv6-icmp xt match "icmp6" counter packets 0 bytes 0 accept meta l4proto ipv6-icmp xt match "icmp6" counter packets 0 bytes 0 accept meta l4proto ipv6-icmp xt match "icmp6" counter packets 0 bytes 0 accept meta l4proto ipv6-icmp xt match "icmp6" counter packets 0 bytes 0 accept meta l4proto ipv6-icmp xt match "icmp6" counter packets 0 bytes 0 accept meta l4proto ipv6-icmp xt match "icmp6" counter packets 0 bytes 0 accept meta l4proto ipv6-icmp xt match "icmp6" xt match "hl" counter packets 2 bytes 96 accept meta l4proto ipv6-icmp xt match "icmp6" xt match "hl" counter packets 11 bytes 744 accept meta l4proto ipv6-icmp xt match "icmp6" xt match "hl" counter packets 11 bytes 792 accept meta l4proto ipv6-icmp xt match "icmp6" xt match "hl" counter packets 0 bytes 0 accept meta l4proto ipv6-icmp xt match "icmp6" xt match "hl" counter packets 0 bytes 0 accept meta l4proto ipv6-icmp xt match "icmp6" xt match "hl" counter packets 0 bytes 0 accept ip6 saddr fe80::/10 meta l4proto ipv6-icmp xt match "icmp6" counter packets 0 bytes 0 accept ip6 saddr fe80::/10 meta l4proto ipv6-icmp xt match "icmp6" counter packets 0 bytes 0 accept ip6 saddr fe80::/10 meta l4proto ipv6-icmp xt match "icmp6" counter packets 0 bytes 0 accept ip6 saddr fe80::/10 meta l4proto ipv6-icmp xt match "icmp6" counter packets 7 bytes 952 accept meta l4proto ipv6-icmp xt match "icmp6" xt match "hl" counter packets 0 bytes 0 accept meta l4proto ipv6-icmp xt match "icmp6" xt match "hl" counter packets 0 bytes 0 accept ip6 saddr fe80::/10 meta l4proto ipv6-icmp xt match "icmp6" xt match "hl" counter packets 0 bytes 0 accept ip6 saddr fe80::/10 meta l4proto ipv6-icmp xt match "icmp6" xt match "hl" counter packets 0 bytes 0 accept ip6 saddr fe80::/10 meta l4proto ipv6-icmp xt match "icmp6" xt match "hl" counter packets 0 bytes 0 accept counter packets 302 bytes 46909 jump ufw6-user-output } chain ufw6-before-forward { xt match "rt" counter packets 0 bytes 0 drop xt match "conntrack" counter packets 0 bytes 0 accept meta l4proto ipv6-icmp xt match "icmp6" counter packets 0 bytes 0 accept meta l4proto ipv6-icmp xt match "icmp6" counter packets 0 bytes 0 accept meta l4proto ipv6-icmp xt match "icmp6" counter packets 0 bytes 0 accept meta l4proto ipv6-icmp xt match "icmp6" counter packets 0 bytes 0 accept meta l4proto ipv6-icmp xt match "icmp6" counter packets 0 bytes 0 accept meta l4proto ipv6-icmp xt match "icmp6" counter packets 0 bytes 0 accept counter packets 0 bytes 0 jump ufw6-user-forward } chain ufw6-after-input { udp dport 137 counter packets 0 bytes 0 jump ufw6-skip-to-policy-input udp dport 138 counter packets 0 bytes 0 jump ufw6-skip-to-policy-input tcp dport 139 counter packets 0 bytes 0 jump ufw6-skip-to-policy-input tcp dport 445 counter packets 0 bytes 0 jump ufw6-skip-to-policy-input udp dport 546 counter packets 0 bytes 0 jump ufw6-skip-to-policy-input udp dport 547 counter packets 0 bytes 0 jump ufw6-skip-to-policy-input } chain ufw6-after-output { } chain ufw6-after-forward { } chain ufw6-after-logging-input { limit rate 3/minute burst 10 packets counter packets 52 bytes 9672 xt target "LOG" } chain ufw6-after-logging-output { } chain ufw6-after-logging-forward { limit rate 3/minute burst 10 packets counter packets 0 bytes 0 xt target "LOG" } chain ufw6-reject-input { } chain ufw6-reject-output { } chain ufw6-reject-forward { } chain ufw6-track-input { } chain ufw6-track-output { meta l4proto tcp xt match "conntrack" counter packets 80 bytes 6400 accept meta l4proto udp xt match "conntrack" counter packets 222 bytes 40509 accept } chain ufw6-track-forward { } chain INPUT { type filter hook input priority filter; policy drop; counter packets 1182 bytes 172352 jump ufw6-before-logging-input counter packets 1182 bytes 172352 jump ufw6-before-input counter packets 493 bytes 86731 jump ufw6-after-input counter packets 493 bytes 86731 jump ufw6-after-logging-input counter packets 493 bytes 86731 jump ufw6-reject-input counter packets 493 bytes 86731 jump ufw6-track-input } chain OUTPUT { type filter hook output priority filter; policy accept; counter packets 1516 bytes 189959 jump ufw6-before-logging-output counter packets 1516 bytes 189959 jump ufw6-before-output counter packets 1352 bytes 176767 jump ufw6-after-output counter packets 1352 bytes 176767 jump ufw6-after-logging-output counter packets 1352 bytes 176767 jump ufw6-reject-output counter packets 1352 bytes 176767 jump ufw6-track-output } chain FORWARD { type filter hook forward priority filter; policy drop; counter packets 0 bytes 0 jump ufw6-before-logging-forward counter packets 0 bytes 0 jump ufw6-before-forward counter packets 0 bytes 0 jump ufw6-after-forward counter packets 0 bytes 0 jump ufw6-after-logging-forward counter packets 0 bytes 0 jump ufw6-reject-forward counter packets 0 bytes 0 jump ufw6-track-forward } chain ufw6-logging-deny { xt match "conntrack" limit rate 3/minute burst 10 packets counter packets 0 bytes 0 return limit rate 3/minute burst 10 packets counter packets 0 bytes 0 xt target "LOG" } chain ufw6-logging-allow { limit rate 3/minute burst 10 packets counter packets 0 bytes 0 xt target "LOG" } chain ufw6-skip-to-policy-input { counter packets 0 bytes 0 drop } chain ufw6-skip-to-policy-output { counter packets 0 bytes 0 accept } chain ufw6-skip-to-policy-forward { counter packets 0 bytes 0 drop } chain ufw6-user-input { } chain ufw6-user-output { } chain ufw6-user-forward { } chain ufw6-user-logging-input { } chain ufw6-user-logging-output { } chain ufw6-user-logging-forward { } chain ufw6-user-limit { limit rate 3/minute burst 5 packets counter packets 0 bytes 0 xt target "LOG" } chain ufw6-user-limit-accept { } } ===== IPTABLES ===== Chain INPUT (policy DROP 164 packets, 24951 bytes) pkts bytes target prot opt in out source destination 104K 38M ufw-before-logging-input all -- * * 0.0.0.0/0 0.0.0.0/0 104K 38M ufw-before-input all -- * * 0.0.0.0/0 0.0.0.0/0 4468 3562K ufw-after-input all -- * * 0.0.0.0/0 0.0.0.0/0 4434 3529K ufw-after-logging-input all -- * * 0.0.0.0/0 0.0.0.0/0 4434 3529K ufw-reject-input all -- * * 0.0.0.0/0 0.0.0.0/0 4434 3529K ufw-track-input all -- * * 0.0.0.0/0 0.0.0.0/0 Chain FORWARD (policy DROP 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 0 0 ufw-before-logging-forward all -- * * 0.0.0.0/0 0.0.0.0/0 0 0 ufw-before-forward all -- * * 0.0.0.0/0 0.0.0.0/0 0 0 ufw-after-forward all -- * * 0.0.0.0/0 0.0.0.0/0 0 0 ufw-after-logging-forward all -- * * 0.0.0.0/0 0.0.0.0/0 0 0 ufw-reject-forward all -- * * 0.0.0.0/0 0.0.0.0/0 0 0 ufw-track-forward all -- * * 0.0.0.0/0 0.0.0.0/0 Chain OUTPUT (policy ACCEPT 25 packets, 1332 bytes) pkts bytes target prot opt in out source destination 267K 54M ufw-before-logging-output all -- * * 0.0.0.0/0 0.0.0.0/0 267K 54M ufw-before-output all -- * * 0.0.0.0/0 0.0.0.0/0 186K 14M ufw-after-output all -- * * 0.0.0.0/0 0.0.0.0/0 186K 14M ufw-after-logging-output all -- * * 0.0.0.0/0 0.0.0.0/0 186K 14M ufw-reject-output all -- * * 0.0.0.0/0 0.0.0.0/0 186K 14M ufw-track-output all -- * * 0.0.0.0/0 0.0.0.0/0 Chain ufw-after-forward (1 references) pkts bytes target prot opt in out source destination Chain ufw-after-input (1 references) pkts bytes target prot opt in out source destination 0 0 ufw-skip-to-policy-input udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:137 0 0 ufw-skip-to-policy-input udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:138 0 0 ufw-skip-to-policy-input tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:139 0 0 ufw-skip-to-policy-input tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:445 0 0 ufw-skip-to-policy-input udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:67 0 0 ufw-skip-to-policy-input udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:68 2 1866 ufw-skip-to-policy-input all -- * * 0.0.0.0/0 0.0.0.0/0 ADDRTYPE match dst-type BROADCAST Chain ufw-after-logging-forward (1 references) pkts bytes target prot opt in out source destination 0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 limit: avg 3/min burst 10 LOG flags 0 level 4 prefix "[UFW BLOCK] " Chain ufw-after-logging-input (1 references) pkts bytes target prot opt in out source destination 53 7358 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 limit: avg 3/min burst 10 LOG flags 0 level 4 prefix "[UFW BLOCK] " Chain ufw-after-logging-output (1 references) pkts bytes target prot opt in out source destination Chain ufw-after-output (1 references) pkts bytes target prot opt in out source destination Chain ufw-before-forward (1 references) pkts bytes target prot opt in out source destination 0 0 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 ctstate RELATED,ESTABLISHED 0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmptype 3 0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmptype 11 0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmptype 12 0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmptype 8 0 0 ufw-user-forward all -- * * 0.0.0.0/0 0.0.0.0/0 Chain ufw-before-input (1 references) pkts bytes target prot opt in out source destination 70 11293 ACCEPT all -- lo * 0.0.0.0/0 0.0.0.0/0 52333 12M ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 ctstate RELATED,ESTABLISHED 23 2452 ufw-logging-deny all -- * * 0.0.0.0/0 0.0.0.0/0 ctstate INVALID 23 2452 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 ctstate INVALID 0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmptype 3 0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmptype 11 0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmptype 12 0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmptype 8 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp spt:67 dpt:68 178 27933 ufw-not-local all -- * * 0.0.0.0/0 0.0.0.0/0 12 1116 ACCEPT udp -- * * 0.0.0.0/0 224.0.0.251 udp dpt:5353 0 0 ACCEPT udp -- * * 0.0.0.0/0 239.255.255.250 udp dpt:1900 166 26817 ufw-user-input all -- * * 0.0.0.0/0 0.0.0.0/0 Chain ufw-before-logging-forward (1 references) pkts bytes target prot opt in out source destination Chain ufw-before-logging-input (1 references) pkts bytes target prot opt in out source destination Chain ufw-before-logging-output (1 references) pkts bytes target prot opt in out source destination Chain ufw-before-output (1 references) pkts bytes target prot opt in out source destination 70 11293 ACCEPT all -- * lo 0.0.0.0/0 0.0.0.0/0 44571 26M ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 ctstate RELATED,ESTABLISHED 42787 2864K ufw-user-output all -- * * 0.0.0.0/0 0.0.0.0/0 Chain ufw-logging-allow (0 references) pkts bytes target prot opt in out source destination 0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 limit: avg 3/min burst 10 LOG flags 0 level 4 prefix "[UFW ALLOW] " Chain ufw-logging-deny (2 references) pkts bytes target prot opt in out source destination 23 2452 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 ctstate INVALID limit: avg 3/min burst 10 0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 limit: avg 3/min burst 10 LOG flags 0 level 4 prefix "[UFW BLOCK] " Chain ufw-not-local (1 references) pkts bytes target prot opt in out source destination 19 2067 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 ADDRTYPE match dst-type LOCAL 157 24000 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 ADDRTYPE match dst-type MULTICAST 2 1866 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 ADDRTYPE match dst-type BROADCAST 0 0 ufw-logging-deny all -- * * 0.0.0.0/0 0.0.0.0/0 limit: avg 3/min burst 10 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 Chain ufw-reject-forward (1 references) pkts bytes target prot opt in out source destination Chain ufw-reject-input (1 references) pkts bytes target prot opt in out source destination Chain ufw-reject-output (1 references) pkts bytes target prot opt in out source destination Chain ufw-skip-to-policy-forward (0 references) pkts bytes target prot opt in out source destination 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 Chain ufw-skip-to-policy-input (7 references) pkts bytes target prot opt in out source destination 2 1866 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 Chain ufw-skip-to-policy-output (0 references) pkts bytes target prot opt in out source destination 0 0 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 Chain ufw-track-forward (1 references) pkts bytes target prot opt in out source destination Chain ufw-track-input (1 references) pkts bytes target prot opt in out source destination Chain ufw-track-output (1 references) pkts bytes target prot opt in out source destination 38317 2318K ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 ctstate NEW 4445 545K ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 ctstate NEW Chain ufw-user-forward (1 references) pkts bytes target prot opt in out source destination Chain ufw-user-input (1 references) pkts bytes target prot opt in out source destination Chain ufw-user-limit (0 references) pkts bytes target prot opt in out source destination 0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 limit: avg 3/min burst 5 LOG flags 0 level 4 prefix "[UFW LIMIT BLOCK] " 0 0 REJECT all -- * * 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable Chain ufw-user-limit-accept (0 references) pkts bytes target prot opt in out source destination 0 0 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 Chain ufw-user-logging-forward (0 references) pkts bytes target prot opt in out source destination Chain ufw-user-logging-input (0 references) pkts bytes target prot opt in out source destination Chain ufw-user-logging-output (0 references) pkts bytes target prot opt in out source destination Chain ufw-user-output (1 references) pkts bytes target prot opt in out source destination ===== ROUTES ===== 0: from all lookup local 32766: from all lookup main 32767: from all lookup default default via <PRIVATE-IP> dev enp4s0 proto dhcp src <PRIVATE-IP> metric 100 default via <PRIVATE-IP> dev wlan0 proto dhcp src <PRIVATE-IP> metric 600 <PRIVATE-IP>/24 dev wlan0 proto kernel scope link src <PRIVATE-IP> metric 600 <PRIVATE-IP>/22 dev enp4s0 proto kernel scope link src <PRIVATE-IP> metric 100 fe80::/64 dev wlan0 proto kernel metric 1024 pref medium fe80::/64 dev enp4s0 proto kernel metric 1024 pref medium default via fe80::<IPv6> dev enp4s0 proto ra metric 20100 pref medium ===== INTERFACES ===== lo UNKNOWN <MAC> <LOOPBACK,UP,LOWER_UP> enp4s0 UP <MAC> <BROADCAST,MULTICAST,UP,LOWER_UP> wlan0 UP <MAC> <BROADCAST,MULTICAST,UP,LOWER_UP> lo UNKNOWN 127.0.0.1/8 ::1/128 enp4s0 UP <PRIVATE-IP>/22 fe80::<IPv6>/64 wlan0 UP <PRIVATE-IP>/24 fe80::<IPv6>/64 ===== NETWORKMANAGER ===== STATE CONNECTIVITY WIFI-HW WIFI WWAN-HW WWAN METERED connected full enabled enabled missing enabled no (guessed) DEVICE TYPE STATE CONNECTION enp4s0 ethernet connected Wired connection 1 wlan0 wifi connected Sharon lo loopback connected (externally) lo p2p-dev-wlan0 wifi-p2p disconnected -- ===== CONNECTIVITY TESTS ===== PING 1.1.1.1 (1.1.1.1) 56(84) bytes of data. 64 bytes from 1.1.1.1: icmp_seq=1 ttl=40 time=75.0 ms 64 bytes from 1.1.1.1: icmp_seq=2 ttl=40 time=74.7 ms 64 bytes from 1.1.1.1: icmp_seq=3 ttl=40 time=75.2 ms 64 bytes from 1.1.1.1: icmp_seq=4 ttl=40 time=74.7 ms --- 1.1.1.1 ping statistics --- 4 packets transmitted, 4 received, 0% packet loss, time 3003ms rtt min/avg/max/mdev = 74.681/74.909/75.214/0.210 ms PING 8.8.8.8 (8.8.8.8) 56(84) bytes of data. 64 bytes from 8.8.8.8: icmp_seq=1 ttl=112 time=8.58 ms 64 bytes from 8.8.8.8: icmp_seq=2 ttl=112 time=9.62 ms 64 bytes from 8.8.8.8: icmp_seq=3 ttl=112 time=9.90 ms 64 bytes from 8.8.8.8: icmp_seq=4 ttl=112 time=8.62 ms --- 8.8.8.8 ping statistics --- 4 packets transmitted, 4 received, 0% packet loss, time 3005ms rtt min/avg/max/mdev = 8.580/9.178/9.900/0.589 ms % Total % Received % Xferd Average Speed Time Time Time Current Dload Upload Total Spent Left Speed 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 HTTP/2 200 date: Tue, 09 Jun 2026 <IPv6> GMT content-type: text/html; charset=utf-8 server: cloudflare x-frame-options: SAMEORIGIN x-xss-protection: 0 x-content-type-options: nosniff x-download-options: noopen x-permitted-cross-domain-policies: none referrer-policy: strict-origin-when-cross-origin link: </assets/fa-513a59a1b44b05443f2f3601cb19d7f0ee8ac61e05a80aa847f3982cb50c071d.css>; rel=preload; as=style; nopush,</assets/application-02631cd591fbb2cd3109f3061adbcbddf3d1bdea945b7838de965b02051fd8c7.css>; rel=preload; as=style; nopush,</assets/turbo-694adf671b9be722aa9b327e9b26b769d91f9235b85e3633a58d001c9974bba1.js>; rel=modulepreload; as=script; nopush,<//cdnjs.cloudflare.com/ajax/libs/jquery/2.2.4/jquery.min.js>; rel=preload; as=script; nopush,<//cdnjs.cloudflare.com/ajax/libs/jquery-ujs/1.2.2/rails.min.js>; rel=preload; as=script; nopush,<//cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/3.2.0/js/bootstrap.js>; rel=preload; as=script; nopush,</assets/libs-4d1c3b91c28b16661257902dc0d203a159fc47ece444ae86a4f72b39873f36b6.js>; rel=preload; as=script; nopush,</assets/application-3c950d8f74db1056adaca9c18b86e9d336aabff206a83a1ba98d9ca85363ed69.js>; rel=preload; as=script; nopush,<//cdnjs.cloudflare.com/ajax/libs/jstimezonedetect/1.0.6/jstz.min.js>; rel=preload; as=script; nopush vary: Accept,Accept-Encoding speculation-rules: "/cdn-cgi/speculation" cache-control: max-age=0, private, must-revalidate set-cookie: _traktsession=EOjwzrst3QKNmmYn5v1tpA457ZnxPMDIkDaW9rsmDOWlq2T%2BTjf%2B3TKrcztg3QeQG1kJ49pJyflwhpe5CSSqbbrUCYYW14DUUyXa9x5dc4CHnvtehuvfYEE%2F9VDPz%2B%2F75m9%2Bd9vfn0WPWIBg%2FPhSDONdLins6%2FLE%2B%2FQ40pvjOSVFgxlizpvlznJEV64y%2B4DE5Q7Uwk2%2B2tLztbZLAtFCtOCSBrcw0Be8FpQD8aI301ugSFR5%2FzJgbHrJe39QgsWG%2F177DVd45d9iCzatslVHjdlBHTTV--mMTzs9Y7EJ8Aei3X--hMUVmUeNz3JrxNK%2FPLoOzw%3D%3D; path=/; HttpOnly; SameSite=Lax x-request-id: 2e55bc2e-e3f4-4859-91ea-de7824325a91 x-runtime: 0.072166 cf-cache-status: DYNAMIC cf-ray: a093dcfafbdf71d9-FRA % Total % Received % Xferd Average Speed Time Time Time Current Dload Upload Total Spent Left Speed 0 0 0 0 0 0 0 0 0 0 167 0 0 0 0 0 0 0 0 167 0 0 0 0 0 0 0 0 167 0 0 0 0 0 0 0 HTTP/2 301 date: Tue, 09 Jun 2026 <IPv6> GMT content-type: text/html content-length: 167 location: https://www.cloudflare.com/ cache-control: max-age=3600 expires: Wed, 10 Jun 2026 <IPv6> GMT set-cookie: __cf_bm=opoHScDLqGFZSk5Pm6.oHYdQNmp.DfmqERw51KZJmaQ-1781047188-1.0.1.1-0rDp5DFVIF.JRJuIhCvj.dJbnGnVVEtOMXkhCBqqORbZOk2t35KJrg9sfDadKm_Qcy_ZyOkHp2RdKBLzxkXfJu0F.SwlaSGROEAr6_5P27Y; path=/; expires=Tue, 09-Jun-26 <IPv6> GMT; domain=.cloudflare.com; HttpOnly; Secure; SameSite=None report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4NoH%2Fr2P5PgYbIMaG7S9gWE0nsyY%2FCn%2B6ENA2Yz67T93xITyuB8dLYexfxxtnT3cP7vIq58Rf6mOMV%2FV26DY41M06eCJkI3ppYUens2H643mXDDwjVlrrqN2ElfpMy%2B1"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} strict-transport-security: max-age=15780000; includeSubDomains server: cloudflare cf-ray: a093dcfd5f9e8cb6-FRA alt-svc: h3=":443"; ma=86400 % Total % Received % Xferd Average Speed Time Time Time Current Dload Upload Total Spent Left Speed 0 0 0 0 0 0 0 0 0HTTP/2 200 date: Tue, 09 Jun 2026 <IPv6> GMT content-type: text/html; charset=utf-8 vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, X-Requested-With, Accept-Language, Sec-Fetch-Site,Accept-Encoding, Accept, X-Requested-With content-language: en-US etag: W/"17d06ea7f461b366597dbd9cdbb29242" cache-control: max-age=0, private, must-revalidate strict-transport-security: max-age=31536000; includeSubdomains; preload x-frame-options: deny x-content-type-options: nosniff x-xss-protection: 0 referrer-policy: origin-when-cross-origin, strict-origin-when-cross-origin content-security-policy: default-src 'none'; base-uri 'self'; child-src github.githubassets.com github.com/assets-cdn/worker/ github.com/assets/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com *.rel.tunnels.api.visualstudio.com wss://*.rel.tunnels.api.visualstudio.com github.githubassets.com objects-origin.githubusercontent.com copilot-proxy.githubusercontent.com proxy.individual.githubcopilot.com proxy.business.githubcopilot.com proxy.enterprise.githubcopilot.com *.actions.githubusercontent.com wss://*.actions.githubusercontent.com productionresultssa0.blob.core.windows.net productionresultssa1.blob.core.windows.net productionresultssa2.blob.core.windows.net productionresultssa3.blob.core.windows.net productionresultssa4.blob.core.windows.net productionresultssa5.blob.core.windows.net productionresultssa6.blob.core.windows.net productionresultssa7.blob.core.windows.net productionresultssa8.blob.core.windows.net productionresultssa9.blob.core.windows.net productionresultssa10.blob.core.windows.net productionresultssa11.blob.core.windows.net productionresultssa12.blob.core.windows.net productionresultssa13.blob.core.windows.net productionresultssa14.blob.core.windows.net productionresultssa15.blob.core.windows.net productionresultssa16.blob.core.windows.net productionresultssa17.blob.core.windows.net productionresultssa18.blob.core.windows.net productionresultssa19.blob.core.windows.net github-production-repository-image-32fea6.s3.amazonaws.com github-production-release-asset-2e65be.s3.amazonaws.com insights.github.com wss://alive.github.com wss://alive-staging.github.com api.githubcopilot.com api.individual.githubcopilot.com api.business.githubcopilot.com api.enterprise.githubcopilot.com edge.fullstory.com rs.fullstory.com; font-src github.githubassets.com; form-action 'self' github.com gist.github.com copilot-workspace.githubnext.com objects-origin.githubusercontent.com; frame-ancestors 'none'; frame-src viewscreen.githubusercontent.com notebooks.githubusercontent.com www.youtube-nocookie.com; img-src 'self' data: blob: github.githubassets.com media.githubusercontent.com camo.githubusercontent.com identicons.github.com avatars.githubusercontent.com private-avatars.githubusercontent.com github-cloud.s3.amazonaws.com objects.githubusercontent.com release-assets.githubusercontent.com secured-user-images.githubusercontent.com user-images.githubusercontent.com private-user-images.githubusercontent.com opengraph.githubassets.com marketplace-screenshots.githubusercontent.com copilotprodattachments.blob.core.windows.net/github-production-copilot-attachments/ github-production-user-asset-6210df.s3.amazonaws.com customer-stories-feed.github.com spotlights-feed.github.com explore-feed.github.com objects-origin.githubusercontent.com *.githubusercontent.com images.ctfassets.net/8aevphvgewt8/; manifest-src 'self'; media-src github.com user-images.githubusercontent.com secured-user-images.githubusercontent.com private-user-images.githubusercontent.com github-production-user-asset-6210df.s3.amazonaws.com gist.github.com github.githubassets.com assets.ctfassets.net/8aevphvgewt8/ videos.ctfassets.net/8aevphvgewt8/; script-src github.githubassets.com; sty 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 le-src 'unsafe-inline' github.githubassets.com; upgrade-insecure-requests; worker-src github.githubassets.com github.com/assets-cdn/worker/ github.com/assets/ gist.github.com/assets-cdn/worker/ server: github.com accept-ranges: bytes set-cookie: _gh_sess=NnN1S%2FaUTAHmdUt4SVFFqb%2BPNIWBJMz6fBiuAluobGXSOyxrwdpXaArWiCjhDe%2BzRJ9UuZ07%2FbtdghsdeBmv6Xg2Rk%2BfZ4L0Rt05Q4jU%2BwpkFecKBA7tFqSpni9lu5EtUyZKDZyDOV4Te5IhDdcWmrFnAtKq3skkUUbcAAV6gB5nA7VwE13TiotfBA7pU%2B7%2BhVKDLahIycpLBkJ%2F1Mk5EkxLfqhMvFZLjNu4Isu2A65nqB2WRIdkyQZuJhUc9y8dM5FMBhJhHiOu%2BxCAhjZqFg%3D%3D--qAS3B2Egr2rAXeMZ--PCOoPe%2FhWiNg7UJ%2BYxYvNw%3D%3D; path=/; HttpOnly; secure; SameSite=Lax set-cookie: _octo=GH1.1.289781632.1781047188; expires=Wed, 09 Jun 2027 <IPv6> GMT; domain=.github.com; path=/; secure; SameSite=Lax set-cookie: logged_in=no; expires=Wed, 09 Jun 2027 <IPv6> GMT; domain=.github.com; path=/; HttpOnly; secure; SameSite=Lax x-github-request-id: CA16:1B717A:60D0DF:9579D7:6A289F94