qubes-firewall.service have Before=qubes-network.service. The latter enable ip_forwarding. Make sure the ordering cover not only service fork, but all its startup sequence, including initial rules and user scripts. Reported-by: @tasket
		
			
				
	
	
		
			13 lines
		
	
	
		
			254 B
		
	
	
	
		
			Desktop File
		
	
	
	
	
	
			
		
		
	
	
			13 lines
		
	
	
		
			254 B
		
	
	
	
		
			Desktop File
		
	
	
	
	
	
| [Unit]
 | |
| Description=Qubes firewall updater
 | |
| ConditionPathExists=/var/run/qubes-service/qubes-firewall
 | |
| After=qubes-iptables.service
 | |
| Before=qubes-network.service
 | |
| 
 | |
| [Service]
 | |
| Type=notify
 | |
| ExecStart=/usr/sbin/qubes-firewall
 | |
| 
 | |
| [Install]
 | |
| WantedBy=multi-user.target
 |