nftables and iptables configurations
root
641bde3045
DNS rate limiting to prevent amplifiction attacks
|
il y a 5 ans | |
|---|---|---|
| if-pre-up.d | il y a 5 ans | |
| logrotate.d | il y a 7 ans | |
| rsyslog.d | il y a 5 ans | |
| README.md | il y a 5 ans | |
| iptables.up.rules | il y a 5 ans | |
| nftables.test.rules | il y a 5 ans | |
| nftables.test.rules.save | il y a 5 ans | |
| nftables.up.rules | il y a 5 ans |
README.md
Translate iptables to nftables
sudo bash -c "iptables-restore-translate -f iptables.up.rules > nftables.up.rules
Load rules
nft -f nftables.up.rules
- For nftables no longer use "/etc/network/iuf-pre-up.d/", but modify "ExecStart" and "ExecReload" in "lib/systemd/system/nftables.service", or symlink the nftables.up.rules over "/etc/nftables.conf".