Talk:Nftables

From Gentoo Wiki
Jump to:navigation Jump to:search
Note
This is a talk page. Please add newer comments below older ones, and sign your comments using four tildes (~~~~). When adding a new section (at the bottom of the page), please mark it as "open for discussion" by using {{talk|open}} so it will show up in the list of open discussions.

http://wiki.gentoo.org/wiki/Nftables#Deleting_Rules

... To delete a rule, you first need to get the handle number of the rule. This can be done by using the -a flag on nft: ...

The -a flag is not used anywere in the document, someone skilled can correct this issue

Added an example of the -a flag usage in the document. - Bergzand 14:19, 5 December 2014 (UTC)

syntax error, unexpected flush, expecting string

This line:

root #echo "nft flush ruleset" > backup.nft

should be:

root #echo "flush ruleset" > backup.nft

otherwise, this error happens:

root #$ sudo nft -f backup.nft
backup.nft:1:5-9: Error: syntax error, unexpected flush, expecting string
nft flush ruleset
    ^^^^^

But the reason that I'm not changing this myself in the page is: 1. I am running the above on non-gentoo linux (nftables v0.4, kernel 4.0.0-g39a8804) and 2. it may have changed with the new versions of nftables thus the original command may still work as expected and without error in gentoo. --EmanueLczirai (talk) 17:17, 21 April 2015 (UTC)

I'm thinking that those commands came from here https://wiki.nftables.org/wiki-nftables/index.php/Operations_at_ruleset_level#backup.2Frestore --EmanueLczirai (talk) 22:23, 21 April 2015 (UTC)
Tested on nftables-0.6-r4 and fixed as suggested Cjmayo (talk) 16:12, 19 November 2016 (UTC)

Still a stub?

Has this been fleshed out enough so that we can drop the stub marking? --TitanOfOld (talk) 17:07, 12 July 2019 (UTC)

Removed the stub TAG Needle (talk) 14:48, 2 January 2020 (UTC)

IPTables support

Talk status
This discussion is still ongoing.

I believe this module - 'IP tables support (required for filtering/masq/NAT)' - is not really necessary to run nftables. On the other hand, the setting 'Netfilter nf_tables reject support' is indeed needed or nftables won't start. Finoderi (talk) 09:50, 2 August 2021 (UTC)

Thanks for the feedback ! Please use the “{{talk|open}}” template and end posts with four tildes to insert signature “~~~~”. I've added the talk template (I know, it's missing from the previous posts too xD), but I don't know how to add another person's signature. Kyoran (talk) 09:04, 2 August 2021 (UTC)
OK. Finoderi (talk) 09:50, 2 August 2021 (UTC)