Difference between revisions of "Nftables"
From Teknologisk videncenter
m |
m (→Links) |
||
| (5 intermediate revisions by the same user not shown) | |||
| Line 1: | Line 1: | ||
*nft --check --file workstation.heth # Syntax check nft script | *nft --check --file workstation.heth # Syntax check nft script | ||
*iptables-translate -A INPUT -s 89.1.1.0/24 -j DROP # Translate [[iptables]] commands into [[nftables]] (Also ip6tables-translate) | *iptables-translate -A INPUT -s 89.1.1.0/24 -j DROP # Translate [[iptables]] commands into [[nftables]] (Also ip6tables-translate) | ||
| + | *nft list ruleset # List nft configuration | ||
| + | *nft list tables # List tables in nfs (Not like iptables where they are separate) | ||
| + | *nft list table nat # List table in nft configuration | ||
| + | |||
| + | On Ubuntu see nft configuration examples in ''/usr/share/doc/nftables/examples'' | ||
=Links= | =Links= | ||
*[https://wiki.nftables.org/wiki-nftables/index.php/Quick_reference-nftables_in_10_minutes Quick reference-nftables in 10 minutes ] | *[https://wiki.nftables.org/wiki-nftables/index.php/Quick_reference-nftables_in_10_minutes Quick reference-nftables in 10 minutes ] | ||
*[https://learning.oreilly.com/library/view/mastering-linux-security/9781837630516/Text/Chapter_4 mastering-linux-security - Chapter 4] | *[https://learning.oreilly.com/library/view/mastering-linux-security/9781837630516/Text/Chapter_4 mastering-linux-security - Chapter 4] | ||
| + | *[https://wiki.archlinux.org/title/nftables archlinux nft examples] (Good) | ||
[[Category:Firewall]][[Category:Linux]] | [[Category:Firewall]][[Category:Linux]] | ||
| + | |||
| + | =Interesting= | ||
| + | *https://wiki.nftables.org/wiki-nftables/index.php/GeoIP_matching | ||
| + | *https://forge.puppet.com/modules/puppet/nftables/readme | ||
| + | *Python | ||
| + | **https://github.com/aborrero/python-nftables-tutorial | ||
| + | **https://ral-arturo.org/2020/11/22/python-nftables-tutorial.html | ||
| + | **https://pypi.org/project/pyroute2.nftables/ | ||
Latest revision as of 20:37, 28 October 2023
- nft --check --file workstation.heth # Syntax check nft script
- iptables-translate -A INPUT -s 89.1.1.0/24 -j DROP # Translate iptables commands into nftables (Also ip6tables-translate)
- nft list ruleset # List nft configuration
- nft list tables # List tables in nfs (Not like iptables where they are separate)
- nft list table nat # List table in nft configuration
On Ubuntu see nft configuration examples in /usr/share/doc/nftables/examples
Links
- Quick reference-nftables in 10 minutes
- mastering-linux-security - Chapter 4
- archlinux nft examples (Good)