В messages возникла ошибка при запуске iptables: "The state match is obsolete. Use conntrack instead."
Лечится заменой mod state на conntrack --ctstate
-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
Меняем на
-A INPUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
В случае с ferm
mod state state (ESTABLISHED RELATED) ACCEPT;
на
mod conntrack ctstate (ESTABLISHED RELATED) ACCEPT;