Nftables: Unterschied zwischen den Versionen

Aus xinux.net
Zur Navigation springen Zur Suche springen
Zeile 21: Zeile 21:
 
}
 
}
 
</pre>
 
</pre>
 +
=Flush rules in chain filter/input=
 +
*nft flush chain inet filter input
 +
=Delete the chain filter/input=
 +
*nft delete chain inet filter input
 +
=Delete the table filter=
 +
*nft delete table inet filter

Version vom 12. November 2019, 11:26 Uhr

Install

  • apt-get install nftables

Create a basic IPv4 table

  • nft add table inet filter

List that table

  • nft list table inet filter
table inet filter {
}

Create a chain for input traffic IPv4

  • nft add chain inet filter input { type filter hook input priority 0\; }

A rule to check that all is fine (IPv4)

  • nft add rule inet filter input counter accept

List that table

  • nft list table inet filter
table inet filter {
	chain input {
		type filter hook input priority 0; policy accept;
		counter packets 47 bytes 3100 accept
	}
}

Flush rules in chain filter/input

  • nft flush chain inet filter input

Delete the chain filter/input

  • nft delete chain inet filter input

Delete the table filter

  • nft delete table inet filter