I am running a LXC container that is VPN'd onto another site which was working fine until recently. For some reason, I cannot get any outbound connections when I am not root, with ovpn running or not.
smserver@sm-borealis:~$ ping google.com; echo "$?"
2
smserver@sm-borealis:~$ sudo ping google.com
PING google.com (142.251.46.238) 56(84) bytes of data.
64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=115 time=19.4 ms
64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=2 ttl=115 time=18.5 ms
64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=3 ttl=115 time=18.2 ms
^C
--- google.com ping statistics ---
3 packets transmitted, 3 received, 0% packet loss, time 2004ms
rtt min/avg/max/mdev = 18.153/18.690/19.398/0.522 ms
smserver@sm-borealis:~$ sudo networkctl
IDX LINK TYPE OPERATIONAL SETUP
1 lo loopback carrier unmanaged
2 eth0 ether routable configured
2 links listed.
smserver@sm-borealis:~$ sudo ufw status
Status: active
To Action From
-- ------ ----
Samba ALLOW Anywhere
25700:25759/tcp ALLOW Anywhere
8006 ALLOW Anywhere
65333 ALLOW Anywhere
Samba (v6) ALLOW Anywhere (v6)
25700:25759/tcp (v6) ALLOW Anywhere (v6)
8006 (v6) ALLOW Anywhere (v6)
65333 (v6) ALLOW Anywhere (v6)
smserver@sm-borealis:~$ sudo systemctl status ufw
* ufw.service - Uncomplicated firewall
Loaded: loaded (/lib/systemd/system/ufw.service; enabled; vendor preset: enabled)
Active: active (exited) since Sun 2022-11-27 17:19:18 UTC; 4min 27s ago
Docs: man:ufw(8)
Process: 93 ExecStart=/lib/ufw/ufw-init start quiet (code=exited, status=0/SUCCESS)
Main PID: 93 (code=exited, status=0/SUCCESS)
CPU: 50ms
smserver@sm-borealis:~$ dig google.com
; <<>> DiG 9.18.1-1ubuntu1-Ubuntu <<>> google.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 16353
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;google.com. IN A
;; ANSWER SECTION:
google.com. 56 IN A 142.251.46.238
;; Query time: 0 msec
;; SERVER: 10.0.1.106#53(10.0.1.106) (UDP)
;; WHEN: Sun Nov 27 17:24:05 UTC 2022
;; MSG SIZE rcvd: 55
There is no real activity in the syslog. Literally anything that works on the network does not work unless I'm root.
I have tried resetting ufw's rules (ufw reset
) and reinstating them, but I still get no luck. As you can see, the DNS resolver still works.