@jerry
I once had problems because newer iptables on #debian is basically a compatibility layer using #nftables in the background. Flushing all rules with iptables would remove the nftables rules but not the #netfilter rules. I had to use iptables-legacy to flush the #netfilter rules.