On Fri, Aug 24, 2018 at 11:22:08PM +0200, Florian Westphal wrote: > Doug Smythies says: > Sometimes it is desirable to temporarily disable, or clear, > the iptables rule set on a computer being controlled via a > secure shell session (SSH). While unwise on an internet facing > computer, I also do it often on non-internet accessible computers > while testing. Recently, this has become problematic, with the > SSH session being dropped upon re-load of the rule set. > > The problem is that when all rules are deleted, conntrack hooks get > unregistered. Applied, thanks Florian.