Please disregard the comment about the relevance of firewall lo rule order - this does not seem to make any difference in this case. The trouble with Tor Browser since kernel 4.20 is valid and I submitted a bug report: https://bugzilla.kernel.org/show_bug.cgi?id=202287 jb