Nftables console - Versionsgeschichte

Linkai.zhang: /* A rule to check that some forward is fine (IPv4) */

2023-01-19T08:58:37Z

A rule to check that some forward is fine (IPv4)

2023-01-19T08:58:27Z

2023-01-19T08:56:15Z

Conntracking for input,output,forward

2023-01-19T08:54:31Z

Create a chain for input,output,forward traffic IPv4

2023-01-19T08:40:08Z

Create a chain for input,output,forward traffic IPv4

2023-01-17T16:37:30Z

2023-01-17T16:32:47Z

Die Seite wurde neu angelegt: „*nft add table inet filter *nft list ruleset table inet filter { }“

Neue Seite

*nft add table inet filter
*nft list ruleset
table inet filter {
}

@@ Zeile 30: / Zeile 30: @@
 *nft add rule inet filter forward  iifname "ens19" oifname "ens18" tcp dport 22 counter accept
 *nft add rule inet filter forward  iifname "ens19" oifname "ens18" tcp dport 443 counter accept
 =List that table=

@@ Zeile 16: / Zeile 16: @@
 =loopback interface traffic is ok=
-*nft add rule filter input  iifname "lo" counter accept
+*nft add rule inet filter input  iifname "lo" counter accept
-*nft add rule filter output  oifname "lo" counter accept
+*nft add rule inet filter output  oifname "lo" counter accept
 =A rule to check that ssh,http,https input is fine (IPv4)=
-*nft add rule filter input tcp dport 22 counter accept
+*nft add rule inet filter input tcp dport 22 counter accept
-*nft add rule filter input tcp dport 80 counter accept
+*nft add rule inet filter input tcp dport 80 counter accept
-*nft add rule filter input tcp dport 443 counter accept
+*nft add rule inet filter input tcp dport 443 counter accept
 =A rule to check that output is fine (IPv4)=
-*nft add rule filter output counter accept
+*nft add rule inet filter output counter accept
 =A rule to check that some forward is fine (IPv4)=
-*nft add rule filter forward  iifname "ens19" oifname "ens18" tcp dport 22 counter accept
+*nft add rule inet filter forward  iifname "ens19" oifname "ens18" tcp dport 22 counter accept
-*nft add rule filter forward  iifname "ens19" oifname "ens18" tcp dport 443 counter accept
+*nft add rule inet filter forward  iifname "ens19" oifname "ens18" tcp dport 443 counter accept
 =List that table=

@@ Zeile 11: / Zeile 11: @@
 =Conntracking for input,output,forward=
-*nft add rule filter input ct state established,related counter accept
+*nft add rule inet filter input ct state established,related counter accept
-*nft add rule filter output ct state established,related counter accept
+*nft add rule inet filter output ct state established,related counter accept
-*nft add rule filter forward ct state established,related counter accept
+*nft add rule inet filter forward ct state established,related counter accept
 =loopback interface traffic is ok=
 *nft add rule filter input  iifname "lo" counter accept

@@ Zeile 6: / Zeile 6: @@
+  }
 =Create a chain for input,output,forward traffic IPv4=
-*nft add chain inet filter input { type filter hook input priority 0; }
+*nft add chain inet filter input { type filter hook input priority 0\; }
-*nft add chain inet filter output { type filter hook output priority 0; }
+*nft add chain inet filter output { type filter hook output priority 0\; }
-*nft add chain inet filter forward { type filter hook forward priority 0; }
+*nft add chain inet filter forward { type filter hook forward priority 0\; }
 =Conntracking for input,output,forward=

@@ Zeile 6: / Zeile 6: @@
+  }
 =Create a chain for input,output,forward traffic IPv4=
-*nft add chain inet filter input { type filter hook input priority 0\; }
+*nft add chain inet filter input { type filter hook input priority 0; }
-*nft add chain inet filter output { type filter hook output priority 0\; }
+*nft add chain inet filter output { type filter hook output priority 0; }
-*nft add chain inet filter forward { type filter hook forward priority 0\; }
+*nft add chain inet filter forward { type filter hook forward priority 0; }
 =Conntracking for input,output,forward=
 *nft add rule filter input ct state established,related counter accept

@@ Zeile 1: / Zeile 1: @@
-*nft add  table inet filter
+=Create a basic IPv4 table=
-*nft list ruleset
+*nft add table inet filter
   table inet filter {
+  }