[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Nftables in jessie?

On Wed, May 14, 2014 at 4:06 PM, Arturo Borrero Gonzalez
<arturo.borrero.glez@gmail.com> wrote:
> Just to let you know: nftables is now on Debian [0].
> Comments are welcome :)

nftables migrated to jessie today, so I gave it a try and so far so good.
As I use rather simple iptables config, converting it to the nftables
was a piece of cake with the added benefit of being more compact and
IMHO more readable than before.

For debugging purposes (log action) I was puzzled about not seeing any
logged packets in syslog.
Fortunately https://home.regit.org/2014/02/nftables-and-netfilter-logging-framework/
There should be some simple guide in the manpage or README.Debian
regarding the extra setup of the logging subsystem.

As there are some config examples in /etc/nftables, I would appreciate
to have subdirectories conf-available and conf-enabled (like Lighttpd
or Apache) and a systemd unit to load these at boot time.


Reply to: