Nftables
Jump to navigation
Jump to search
nftables is the successor of iptables for managing firewall rules.
At first glance [1] it looks a bit like a ufw
| Family | Remark |
|---|---|
| ip | IPv4 This is the default if no family is specified |
| ip6 | IPv6 |
| inet | IPv4 + IPv6 |
| arp | arp |
| bridge | bridge |
Install and activate
Debian comes with nftables installed since Buster.
- apt install nftables
- Install if needed
- systemctl enable nftables.service
- Create the service
- systemctl start nftables
- service nftables start
- Start the service
- systemctl status nftables
- service nftables status
- Show status
Confiuration
The configuration is in /etc/nftables.conf
Commands
- nft list ruleset
- Show the current ruleset in the format you can load with nft -f (see below)
- nft list table <family> filter
- Show the current filters for <family>.
- nft -f <filename>
- Load rules from <filename>