These rules are the default rules set by the kernel without any userland assistance when it initializes the initial network stack (or a new network namespace).
Here's the relevant kernel source excerpt:
static int fib_default_rules_init(struct fib_rules_ops *ops)
err = fib_default_rule_add(ops, 0, RT_TABLE_LOCAL, 0);
if (err < 0)
Your behavior is completely normal.
to a more conform to your needs
Be sure to have the right key at the right place (usually ~/.ssh/authorized_keys) with the good owner:group, and with the chmod 600 and 700 on ~/.ssh/authorized_keys and ~/.ssh.
Please, register your RHEL version.
# subscription-manager register --username admin-example --password secret --auto-attach
Then validate repos.
To see a list of available repositories:
# subscription-manager repos --list
To enable a specific Red Hat repository:
# subscription-manager repos --enable=rhel-6-server-optional-rpms
Enabling or disabling a ...
I'm just spinning up an instance to test, but I suspect it's because you're not allowing related/established outbound rules as well, so the kernel is killing your existing connections.
Update: I'm sure this is the problem. I just tested it by booting Centos 7 on an EC2 instance, installing FirewallD, and then pasting in your first rule without the permanent ...
It seems this was caused by something in the Alpine setup process inside the KVM guest. It didn't occur when running the basic setup-alpine but did occur when doing a manual setup (e.g. custom disk partitioning).
There is no connection between host OS and guest OS regarding this.
It is Alpine Linux that assigns the permissions to the device node. They have had bugs related to this earlier: https://wiki.alpinelinux.org/wiki/Release_Notes_for_Alpine_22.214.171.124
You need to check with Alpine Linux developers why the permissions are setup like that. Most likely it is ...