UFW Turns On After Every Reboot — It Doesn’t. A Stale netfilter-persistent Snapshot Does
After every reboot an Ubuntu server dropped traffic as if UFW were on. The team ran ufw disable each time and later masked the UFW service, yet the rules came back. UFW was never enabled. An old netfilter-persistent snapshot, saved while UFW was running, was loading its rules at boot.