From: Kerin Millar <kfm@plushkava.net>
To: Jeff <jnewman67@gmx.com>
Cc: netfilter@vger.kernel.org
Subject: Re: netfilter 10,000' overview
Date: Sun, 3 Oct 2021 02:36:15 +0100 [thread overview]
Message-ID: <20211003023615.10f438fe018df4608587aef5@plushkava.net> (raw)
In-Reply-To: <015701d7b7f5$2d07dec0$87179c40$@gmx.com>
(re-copying the list into CC ...)
On Sat, 2 Oct 2021 21:22:46 -0400
"Jeff" <jnewman67@gmx.com> wrote:
[...]
> Looking at the Redhat article you linked to, it appears that Fedora
> implements nftables under iptables, which I assume affect the nf_tables
> ruleset. However, it mentions the inclusion of xtables utilities, but it
> appears those are just used to convert xtable-like rules compatible with
> nf_tables. So it appears nf_tables is the underlying ruleset.
Since Fedora 32, apparently.
https://fedoraproject.org/wiki/Changes/iptables-nft-default
On such a system, you may find it interesting to compare the output of "iptables-save" and "nft list ruleset".
>
> I'll do some learning on how to make rules in nftables, and get some of my
> scripts converted over, and see how I get along.
See, also, "iptables-translate" and "iptables-restore-translate". While not perfect, they are definitely useful.
>
> If I got anything wrong in this response, I'd appreciate knowing.
> Otherwise, I really do appreciate your time, and I'll leave you to what must
> be much more important things :)
>
> Jeff
--
Kerin Millar
next prev parent reply other threads:[~2021-10-03 1:36 UTC|newest]
Thread overview: 4+ messages / expand[flat|nested] mbox.gz Atom feed top
2021-10-01 21:23 netfilter 10,000' overview Jeff
2021-10-02 23:49 ` Kerin Millar
[not found] ` <015701d7b7f5$2d07dec0$87179c40$@gmx.com>
2021-10-03 1:36 ` Kerin Millar [this message]
2021-10-03 2:01 ` Jeff
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20211003023615.10f438fe018df4608587aef5@plushkava.net \
--to=kfm@plushkava.net \
--cc=jnewman67@gmx.com \
--cc=netfilter@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.