ljmf00 / home-infrastructure

Home Server ansible configuration
MIT License
1 stars 1 forks source link

luna: ufw blocking minikube mount #6

Open alexjorgef opened 4 years ago

alexjorgef commented 4 years ago

On luna host, ufw firewall is blocking tcp traffic to mount a persistent volume on minikube k8s instances. Related to kubernetes/minikube#8054 issue.

Steps to reproduce the issue:

  1. minikube config set vm-driver docker
  2. minikube start --kubernetes-version "1.14.10" -p agones
  3. minikube profile agones
  4. minikube mount --v=10 --alsologtostderr $(pwd)/agones-data:/mnt/data

Full output of failed command:

I0509 07:09:40.426586 1789962 mustload.go:63] Loading cluster: agones
I0509 07:09:40.427390 1789962 oci.go:250] executing with [docker inspect -f {{.State.Status}} agones] timeout: 19s
I0509 07:09:40.581705 1789962 host.go:65] Checking if "agones" exists ...
I0509 07:09:40.733572 1789962 network.go:78] got host ip for mount in container by inspect docker network: 172.17.0.1
�  Mounting host path /home/alex/ProgrammingFiles/dedicatedslave/agones-data into VM as /mnt/data ...
    ▪ Mount type:   <no value>
    ▪ User ID:      docker
    ▪ Group ID:     docker
    ▪ Version:      9p2000.L
    ▪ Message Size: 262144
    ▪ Permissions:  755 (-rwxr-xr-x)
    ▪ Options:      map[]
    ▪ Bind Address: 172.17.0.1:43299
�  Userspace file server: ufs starting
I0509 07:09:40.735036 1789962 kic_runner.go:91] Run: /bin/bash -c "[ "x$(findmnt -T /mnt/data | grep /mnt/data)" != "x" ] && sudo umount -f /mnt/data || echo "
I0509 07:09:41.013667 1789962 mount.go:147] unmount for /mnt/data ran successfully
I0509 07:09:41.013788 1789962 kic_runner.go:91] Run: /bin/bash -c "sudo mkdir -m 755 -p /mnt/data"
I0509 07:09:41.197965 1789962 kic_runner.go:91] Run: /bin/bash -c "sudo mount -t 9p -o dfltgid=$(grep ^docker: /etc/group | cut -d: -f3),dfltuid=$(id -u docker),msize=262144,port=43299,trans=tcp,version=9p2000.L 172.17.0.1 /mnt/data"
W0509 07:11:51.538471 1789962 exit.go:101] mount failed: mount with cmd /bin/bash -c "sudo mount -t 9p -o dfltgid=$(grep ^docker: /etc/group | cut -d: -f3),dfltuid=$(id -u docker),msize=262144,port=43299,trans=tcp,version=9p2000.L 172.17.0.1 /mnt/data" : /bin/bash -c "sudo mount -t 9p -o dfltgid=$(grep ^docker: /etc/group | cut -d: -f3),dfltuid=$(id -u docker),msize=262144,port=43299,trans=tcp,version=9p2000.L 172.17.0.1 /mnt/data": exit status 32
stdout:

stderr:
mount: /mnt/data: mount(2) system call failed: Connection timed out.

�  mount failed: mount with cmd /bin/bash -c "sudo mount -t 9p -o dfltgid=$(grep ^docker: /etc/group | cut -d: -f3),dfltuid=$(id -u docker),msize=262144,port=43299,tran s=tcp,version=9p2000.L 172.17.0.1 /mnt/data" : /bin/bash -c "sudo mount -t 9p -o dfltgid=$(grep ^docker: /etc/group | cut -d: -f3),dfltuid=$(id -u docker),msize=262144,port=43299,trans=tcp,version=9p2000.L 172.17.0.1 /mnt/data": exit status 32
stdout:

stderr:
mount: /mnt/data: mount(2) system call failed: Connection timed out.

�  minikube is exiting due to an error. If the above message is not useful, open an issue:
�  https://github.com/kubernetes/minikube/issues/new/choose

Full output of journalctl during error:

-- Logs begin at Fri 2020-03-27 10:52:22 WET. --
May 11 20:51:01 luna kernel: [UFW BLOCK] IN=br0 OUT= PHYSIN=enp1s0 MAC=66:c7:63:54:dc:93:48:fd:8e:b2:08:29:08:00 SRC=41.60.203.138 DST=192.168.1.1 LEN=48 TOS=0x00 PREC=0x00 TTL=107 ID=13713 PROTO=UDP SPT=37370 DPT=45041 LEN=28 
May 11 20:51:07 luna kernel: [UFW BLOCK] IN=br0 OUT= PHYSIN=enp1s0 MAC=33:33:00:00:83:84:38:59:f9:68:ce:15:86:dd SRC=fe80:0000:0000:0000:a15d:2c84:eadf:b03f DST=ff12:0000:0000:0000:0000:0000:0000:8384 LEN=380 TC=0 HOPLIMIT=1 FLOWLBL=0 PROTO=UDP SPT=49153 DPT=21027 LEN=340 
May 11 20:51:07 luna kernel: [UFW BLOCK] IN=br0 OUT= PHYSIN=enp1s0 MAC=33:33:00:00:83:84:38:59:f9:68:ce:15:86:dd SRC=fe80:0000:0000:0000:a15d:2c84:eadf:b03f DST=ff12:0000:0000:0000:0000:0000:0000:8384 LEN=380 TC=0 HOPLIMIT=1 FLOWLBL=0 PROTO=UDP SPT=49153 DPT=21027 LEN=340 
May 11 20:51:11 luna audit: NETFILTER_CFG table=filter family=2 entries=42
May 11 20:51:11 luna kernel: audit: type=1325 audit(1589226671.678:50943): table=filter family=2 entries=42
May 11 20:51:11 luna audit: NETFILTER_CFG table=nat family=2 entries=173
May 11 20:51:11 luna kernel: audit: type=1325 audit(1589226671.681:50944): table=nat family=2 entries=173
May 11 20:51:21 luna kernel: [UFW BLOCK] IN=br0 OUT= PHYSIN=enp1s0 MAC=66:c7:63:54:dc:93:48:fd:8e:b2:08:29:08:00 SRC=207.55.55.76 DST=192.168.1.1 LEN=48 TOS=0x00 PREC=0x00 TTL=112 ID=18935 PROTO=UDP SPT=25623 DPT=45041 LEN=28 
May 11 20:51:28 luna audit: NETFILTER_CFG table=nat family=2 entries=173
May 11 20:51:28 luna kernel: audit: type=1325 audit(1589226688.772:50945): table=nat family=2 entries=173
May 11 20:51:37 luna kernel: [UFW BLOCK] IN=br0 OUT= PHYSIN=enp1s0 MAC=33:33:00:00:83:84:38:59:f9:68:ce:15:86:dd SRC=fe80:0000:0000:0000:a15d:2c84:eadf:b03f DST=ff12:0000:0000:0000:0000:0000:0000:8384 LEN=380 TC=0 HOPLIMIT=1 FLOWLBL=0 PROTO=UDP SPT=49153 DPT=21027 LEN=340 
May 11 20:51:38 luna audit[3614087]: USER_ACCT pid=3614087 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting grantors=pam_permit acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
May 11 20:51:38 luna audit[3614087]: USER_CMD pid=3614087 uid=0 auid=4294967295 ses=4294967295 msg='cwd="/" cmd=6D6B646972202D6D20373535202D70202F6D6E742F64617461 terminal=? res=success'
May 11 20:51:38 luna audit[3614087]: CRED_REFR pid=3614087 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred grantors=pam_permit acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
May 11 20:51:38 luna audit[3614087]: USER_START pid=3614087 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open grantors=pam_env,pam_env,pam_permit,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
May 11 20:51:38 luna kernel: audit: type=1101 audit(1589226698.542:50946): pid=3614087 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting grantors=pam_permit acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
May 11 20:51:38 luna kernel: audit: type=1123 audit(1589226698.542:50947): pid=3614087 uid=0 auid=4294967295 ses=4294967295 msg='cwd="/" cmd=6D6B646972202D6D20373535202D70202F6D6E742F64617461 terminal=? res=success'
May 11 20:51:38 luna kernel: audit: type=1110 audit(1589226698.542:50948): pid=3614087 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred grantors=pam_permit acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
May 11 20:51:38 luna kernel: audit: type=1105 audit(1589226698.542:50949): pid=3614087 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open grantors=pam_env,pam_env,pam_permit,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
May 11 20:51:38 luna kernel: audit: type=1106 audit(1589226698.545:50950): pid=3614087 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close grantors=pam_env,pam_env,pam_permit,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
May 11 20:51:38 luna kernel: audit: type=1104 audit(1589226698.545:50951): pid=3614087 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred grantors=pam_permit acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
May 11 20:51:38 luna audit[3614087]: USER_END pid=3614087 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close grantors=pam_env,pam_env,pam_permit,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
May 11 20:51:38 luna audit[3614087]: CRED_DISP pid=3614087 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred grantors=pam_permit acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
May 11 20:51:38 luna audit[3614123]: USER_ACCT pid=3614123 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting grantors=pam_permit acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
May 11 20:51:38 luna kernel: audit: type=1101 audit(1589226698.732:50952): pid=3614123 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting grantors=pam_permit acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
May 11 20:51:38 luna kernel: audit: type=1123 audit(1589226698.732:50953): pid=3614123 uid=0 auid=4294967295 ses=4294967295 msg='cwd="/" cmd=6D6F756E74202D74203970202D6F2064666C746769643D3130392C64666C747569643D313030302C6D73697A653D3236323134342C706F72743D33343232372C7472616E733D7463702C76657273696F6E3D3970323030302E4C203137322E31372E302E31202F6D6E742F64617461 terminal=? res=success'
May 11 20:51:38 luna kernel: audit: type=1110 audit(1589226698.732:50954): pid=3614123 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred grantors=pam_permit acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
May 11 20:51:38 luna kernel: audit: type=1105 audit(1589226698.732:50955): pid=3614123 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open grantors=pam_env,pam_env,pam_permit,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
May 11 20:51:38 luna audit[3614123]: USER_CMD pid=3614123 uid=0 auid=4294967295 ses=4294967295 msg='cwd="/" cmd=6D6F756E74202D74203970202D6F2064666C746769643D3130392C64666C747569643D313030302C6D73697A653D3236323134342C706F72743D33343232372C7472616E733D7463702C76657273696F6E3D3970323030302E4C203137322E31372E302E31202F6D6E742F64617461 terminal=? res=success'
May 11 20:51:38 luna audit[3614123]: CRED_REFR pid=3614123 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred grantors=pam_permit acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
May 11 20:51:38 luna audit[3614123]: USER_START pid=3614123 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open grantors=pam_env,pam_env,pam_permit,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
May 11 20:51:41 luna kernel: [UFW BLOCK] IN=br0 OUT= PHYSIN=enp1s0 MAC=66:c7:63:54:dc:93:48:fd:8e:b2:08:29:08:00 SRC=93.168.84.94 DST=192.168.1.1 LEN=48 TOS=0x00 PREC=0x00 TTL=110 ID=6982 PROTO=UDP SPT=1351 DPT=45041 LEN=28 
May 11 20:51:41 luna audit: NETFILTER_CFG table=filter family=2 entries=42
May 11 20:51:41 luna audit: NETFILTER_CFG table=nat family=2 entries=173
May 11 20:51:50 luna clamav-unofficial-sigs.sh[3610540]: ***********************************************************************************
May 11 20:51:50 luna clamav-unofficial-sigs.sh[3610540]: ALERT: New version : v7.0.1 @ https://github.com/extremeshok/clamav-unofficial-sigs
May 11 20:51:50 luna clamav-unofficial-sigs.sh[3610540]: ***********************************************************************************
May 11 20:51:50 luna clamav-unofficial-sigs.sh[3610540]: ***************************************************************************************
May 11 20:51:50 luna clamav-unofficial-sigs.sh[3610540]: ALERT: New config version : v91 @ https://github.com/extremeshok/clamav-unofficial-sigs
May 11 20:51:50 luna clamav-unofficial-sigs.sh[3610540]: ***************************************************************************************
May 11 20:51:50 luna audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=clamav-unofficial-sigs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
May 11 20:51:50 luna systemd[1]: clamav-unofficial-sigs.service: Succeeded.
May 11 20:51:50 luna kernel: kauditd_printk_skb: 2 callbacks suppressed
May 11 20:51:50 luna kernel: audit: type=1131 audit(1589226710.845:50958): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=clamav-unofficial-sigs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
May 11 20:52:01 luna kernel: [UFW BLOCK] IN=br0 OUT= PHYSIN=enp1s0 MAC=66:c7:63:54:dc:93:48:fd:8e:b2:08:29:08:00 SRC=2.36.64.210 DST=192.168.1.1 LEN=48 TOS=0x00 PREC=0x00 TTL=117 ID=52573 PROTO=UDP SPT=47371 DPT=45041 LEN=28 
May 11 20:52:07 luna kernel: [UFW BLOCK] IN=br0 OUT= PHYSIN=enp1s0 MAC=33:33:00:00:83:84:38:59:f9:68:ce:15:86:dd SRC=fe80:0000:0000:0000:a15d:2c84:eadf:b03f DST=ff12:0000:0000:0000:0000:0000:0000:8384 LEN=380 TC=0 HOPLIMIT=1 FLOWLBL=0 PROTO=UDP SPT=49153 DPT=21027 LEN=340 
May 11 20:52:07 luna kernel: [UFW BLOCK] IN=br0 OUT= PHYSIN=enp1s0 MAC=33:33:00:00:83:84:38:59:f9:68:ce:15:86:dd SRC=fe80:0000:0000:0000:a15d:2c84:eadf:b03f DST=ff12:0000:0000:0000:0000:0000:0000:8384 LEN=380 TC=0 HOPLIMIT=1 FLOWLBL=0 PROTO=UDP SPT=49153 DPT=21027 LEN=340 
May 11 20:52:11 luna audit: NETFILTER_CFG table=filter family=2 entries=42
May 11 20:52:11 luna kernel: audit: type=1325 audit(1589226731.746:50959): table=filter family=2 entries=42
May 11 20:52:11 luna audit: NETFILTER_CFG table=nat family=2 entries=173
May 11 20:52:11 luna kernel: audit: type=1325 audit(1589226731.749:50960): table=nat family=2 entries=173
May 11 20:52:21 luna kernel: [UFW BLOCK] IN=br0 OUT= PHYSIN=enp1s0 MAC=66:c7:63:54:dc:93:48:fd:8e:b2:08:29:08:00 SRC=79.106.209.120 DST=192.168.1.1 LEN=58 TOS=0x00 PREC=0x00 TTL=114 ID=6306 PROTO=UDP SPT=54490 DPT=45041 LEN=38 
May 11 20:52:28 luna audit: NETFILTER_CFG table=nat family=2 entries=173
May 11 20:52:28 luna kernel: audit: type=1325 audit(1589226748.782:50961): table=nat family=2 entries=173
May 11 20:52:37 luna kernel: [UFW BLOCK] IN=br0 OUT= PHYSIN=enp1s0 MAC=33:33:00:00:83:84:38:59:f9:68:ce:15:86:dd SRC=fe80:0000:0000:0000:a15d:2c84:eadf:b03f DST=ff12:0000:0000:0000:0000:0000:0000:8384 LEN=380 TC=0 HOPLIMIT=1 FLOWLBL=0 PROTO=UDP SPT=49153 DPT=21027 LEN=340 
May 11 20:52:41 luna kernel: [UFW BLOCK] IN=br0 OUT= PHYSIN=enp1s0 MAC=66:c7:63:54:dc:93:48:fd:8e:b2:08:29:08:00 SRC=207.180.210.81 DST=192.168.1.1 LEN=125 TOS=0x00 PREC=0x00 TTL=53 ID=17654 DF PROTO=UDP SPT=12006 DPT=51413 LEN=105 
May 11 20:52:41 luna audit: NETFILTER_CFG table=filter family=2 entries=42
May 11 20:52:41 luna kernel: audit: type=1325 audit(1589226761.779:50962): table=filter family=2 entries=42
May 11 20:52:41 luna audit: NETFILTER_CFG table=nat family=2 entries=173
May 11 20:52:41 luna kernel: audit: type=1325 audit(1589226761.783:50963): table=nat family=2 entries=173
May 11 20:53:01 luna kernel: [UFW BLOCK] IN=br0 OUT= PHYSIN=enp1s0 MAC=66:c7:63:54:dc:93:48:fd:8e:b2:08:29:08:00 SRC=61.62.214.45 DST=192.168.1.1 LEN=126 TOS=0x00 PREC=0x00 TTL=110 ID=21205 PROTO=UDP SPT=9345 DPT=51413 LEN=106 
May 11 20:53:07 luna kernel: [UFW BLOCK] IN=br0 OUT= PHYSIN=enp1s0 MAC=33:33:00:00:83:84:38:59:f9:68:ce:15:86:dd SRC=fe80:0000:0000:0000:a15d:2c84:eadf:b03f DST=ff12:0000:0000:0000:0000:0000:0000:8384 LEN=380 TC=0 HOPLIMIT=1 FLOWLBL=0 PROTO=UDP SPT=49153 DPT=21027 LEN=340 
May 11 20:53:07 luna kernel: [UFW BLOCK] IN=br0 OUT= PHYSIN=enp1s0 MAC=33:33:00:00:83:84:38:59:f9:68:ce:15:86:dd SRC=fe80:0000:0000:0000:a15d:2c84:eadf:b03f DST=ff12:0000:0000:0000:0000:0000:0000:8384 LEN=380 TC=0 HOPLIMIT=1 FLOWLBL=0 PROTO=UDP SPT=49153 DPT=21027 LEN=340 
May 11 20:53:11 luna audit: NETFILTER_CFG table=filter family=2 entries=42
May 11 20:53:11 luna kernel: audit: type=1325 audit(1589226791.813:50964): table=filter family=2 entries=42
May 11 20:53:11 luna audit: NETFILTER_CFG table=nat family=2 entries=173
May 11 20:53:11 luna kernel: audit: type=1325 audit(1589226791.816:50965): table=nat family=2 entries=173
May 11 20:53:21 luna kernel: [UFW BLOCK] IN=br0 OUT= PHYSIN=enp1s0 MAC=66:c7:63:54:dc:93:48:fd:8e:b2:08:29:08:00 SRC=86.120.226.16 DST=192.168.1.1 LEN=58 TOS=0x00 PREC=0x00 TTL=113 ID=22890 PROTO=UDP SPT=59492 DPT=45041 LEN=38 
May 11 20:53:28 luna audit: NETFILTER_CFG table=nat family=2 entries=173
May 11 20:53:28 luna kernel: audit: type=1325 audit(1589226808.870:50966): table=nat family=2 entries=173
May 11 20:53:37 luna kernel: [UFW BLOCK] IN=br0 OUT= PHYSIN=enp1s0 MAC=33:33:00:00:83:84:38:59:f9:68:ce:15:86:dd SRC=fe80:0000:0000:0000:a15d:2c84:eadf:b03f DST=ff12:0000:0000:0000:0000:0000:0000:8384 LEN=380 TC=0 HOPLIMIT=1 FLOWLBL=0 PROTO=UDP SPT=49153 DPT=21027 LEN=340 
May 11 20:53:41 luna kernel: [UFW BLOCK] IN=br0 OUT= PHYSIN=enp1s0 MAC=66:c7:63:54:dc:93:48:fd:8e:b2:08:29:08:00 SRC=62.240.28.12 DST=192.168.1.1 LEN=48 TOS=0x00 PREC=0x00 TTL=110 ID=64956 PROTO=UDP SPT=43313 DPT=45041 LEN=28 
May 11 20:53:41 luna audit: NETFILTER_CFG table=filter family=2 entries=42
May 11 20:53:41 luna kernel: audit: type=1325 audit(1589226821.844:50967): table=filter family=2 entries=42
May 11 20:53:41 luna audit: NETFILTER_CFG table=nat family=2 entries=173
May 11 20:53:41 luna kernel: audit: type=1325 audit(1589226821.847:50968): table=nat family=2 entries=173
May 11 20:53:48 luna audit[3614123]: USER_END pid=3614123 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close grantors=pam_env,pam_env,pam_permit,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
May 11 20:53:48 luna audit[3614123]: CRED_DISP pid=3614123 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred grantors=pam_permit acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
May 11 20:53:48 luna kernel: 9pnet: p9_fd_create_tcp (3614132): problem connecting socket to 172.17.0.1
May 11 20:53:48 luna kernel: audit: type=1106 audit(1589226828.990:50969): pid=3614123 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close grantors=pam_env,pam_env,pam_permit,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
May 11 20:53:48 luna kernel: audit: type=1104 audit(1589226828.990:50970): pid=3614123 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred grantors=pam_permit acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
May 11 20:54:01 luna kernel: [UFW BLOCK] IN=br0 OUT= PHYSIN=enp1s0 MAC=66:c7:63:54:dc:93:48:fd:8e:b2:08:29:08:00 SRC=5.14.204.2 DST=192.168.1.1 LEN=48 TOS=0x00 PREC=0x00 TTL=113 ID=14749 PROTO=UDP SPT=1081 DPT=45041 LEN=28 
May 11 20:54:07 luna kernel: [UFW BLOCK] IN=br0 OUT= PHYSIN=enp1s0 MAC=33:33:00:00:83:84:38:59:f9:68:ce:15:86:dd SRC=fe80:0000:0000:0000:a15d:2c84:eadf:b03f DST=ff12:0000:0000:0000:0000:0000:0000:8384 LEN=380 TC=0 HOPLIMIT=1 FLOWLBL=0 PROTO=UDP SPT=49153 DPT=21027 LEN=340 
May 11 20:54:07 luna kernel: [UFW BLOCK] IN=br0 OUT= PHYSIN=enp1s0 MAC=33:33:00:00:83:84:38:59:f9:68:ce:15:86:dd SRC=fe80:0000:0000:0000:a15d:2c84:eadf:b03f DST=ff12:0000:0000:0000:0000:0000:0000:8384 LEN=380 TC=0 HOPLIMIT=1 FLOWLBL=0 PROTO=UDP SPT=49153 DPT=21027 LEN=340 
May 11 20:54:11 luna audit: NETFILTER_CFG table=filter family=2 entries=42
May 11 20:54:11 luna kernel: audit: type=1325 audit(1589226851.877:50971): table=filter family=2 entries=42
May 11 20:54:11 luna audit: NETFILTER_CFG table=nat family=2 entries=173
May 11 20:54:11 luna kernel: audit: type=1325 audit(1589226851.881:50972): table=nat family=2 entries=173
ljmf00 commented 4 years ago

Related to this issue: https://askubuntu.com/questions/652556/uncomplicated-firewall-ufw-is-not-blocking-anything-when-using-docker