Talk:Nftables

Note
This is a Talk page - please see the documentation about using talk pages. Add newer comments below older ones, sign comments using four tildes (~~~~), and indent successive comments with colons (:). Add new sections at the bottom of the page, under a heading (== ==). Please remember to mark sections as "open for discussion" using {{talk|open}}, so they will show up in the list of open discussions.

-a flag

Talk status

This discussion is done as of 5 August 2022.

Nftables#Deleting_rules

... To delete a rule, you first need to get the handle number of the rule. This can be done by using the -a flag on nft: ...

The -a flag is not used anywere in the document, someone skilled can correct this issue

— The preceding unsigned comment was added by Tender (talk • contribs) 17 October 2014

Added an example of the -a flag usage in the document. - Bergzand 14:19, 5 December 2014 (UTC)

A fix was provided (Special:Diff/167250). --Blacki (talk) 20:31, 5 August 2022 (UTC)

syntax error, unexpected flush, expecting string

Talk status

This discussion is done as of 5 August 2022.

This line:

root #echo "nft flush ruleset" > backup.nft

should be:

root #echo "flush ruleset" > backup.nft

otherwise, this error happens:

root #$ sudo nft -f backup.nft

backup.nft:1:5-9: Error: syntax error, unexpected flush, expecting string
nft flush ruleset
    ^^^^^

But the reason that I'm not changing this myself in the page is: 1. I am running the above on non-gentoo linux (nftables v0.4, kernel 4.0.0-g39a8804) and 2. it may have changed with the new versions of nftables thus the original command may still work as expected and without error in gentoo. --EmanueLczirai (talk) 17:17, 21 April 2015 (UTC)

I'm thinking that those commands came from here https://wiki.nftables.org/wiki-nftables/index.php/Operations_at_ruleset_level#backup.2Frestore --EmanueLczirai (talk) 22:23, 21 April 2015 (UTC)

Tested on nftables-0.6-r4 and fixed as suggested Cjmayo (talk) 16:12, 19 November 2016 (UTC)

A fix was provided (Special:Diff/568880). --Blacki (talk) 20:35, 5 August 2022 (UTC)

Still a stub?

Talk status

This discussion is done as of 5 August 2022.

Has this been fleshed out enough so that we can drop the stub marking? --TitanOfOld (talk) 17:07, 12 July 2019 (UTC)

Removed the stub TAG Needle (talk) 14:48, 2 January 2020 (UTC)

A fix was provided (Special:Diff/850782). --Blacki (talk) 20:39, 5 August 2022 (UTC)

IPTables support

Talk status

This discussion is still ongoing.

I believe this module - 'IP tables support (required for filtering/masq/NAT)' - is not really necessary to run nftables. On the other hand, the setting 'Netfilter nf_tables reject support' is indeed needed or nftables won't start. Finoderi (talk) 09:50, 2 August 2021 (UTC)

Thanks for the feedback ! Please use the “{{talk|open}}” template and end posts with four tildes to insert signature “~~~~”. I've added the talk template (I know, it's missing from the previous posts too xD), but I don't know how to add another person's signature. Kyoreln (talk) 09:04, 2 August 2021 (UTC)

OK. Finoderi (talk) 09:50, 2 August 2021 (UTC)