Nftables

From wiki
Revision as of 22:14, 23 December 2025 by Hdridder (talk | contribs) (Created page with "nftables is the successor of iptables At first glance [https://wiki.debian.org/nftables] it looks a bit like a ufw {| class="wikitable" style="width:35%" |+ Address families ! Family ! Remark |- | ip | IPv4 This is the default if no family is specified |- | ip6 | IPv6 |- | inet | IPv4 + IPv6 |- | arp | arp |- | bridge | bridge |} =Install and activate= Debian comes with nftables installed since Buster. ;apt install nftables :Install if needed ;sys...")
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Jump to navigation Jump to search

nftables is the successor of iptables

At first glance [1] it looks a bit like a ufw

Address families
Family Remark
ip IPv4 This is the default if no family is specified
ip6 IPv6
inet IPv4 + IPv6
arp arp
bridge bridge

Install and activate

Debian comes with nftables installed since Buster.

apt install nftables
Install if needed
systemctl enable nftables.service
Create the service
systemctl start nftables
service nftables start
Start the service
systemctl status nftables
service start nftables

Confiuration

The configuration is in /etc/nftables.conf

Commands

nft list table <family> filter
Show the current filters for <family>.
Retrieved from "https://wiki.antiperfect.org/index.php?title=Nftables&oldid=1674"