Re: stretch vs iptables auto-start
On Monday 24 August 2020 04:45:01 Andrei POPESCU wrote:
> On Du, 23 aug 20, 21:34:12, Gene Heskett wrote:
> > On Sunday 23 August 2020 15:45:22 Joe wrote:
> > > My server iptables is inherited from, I think, sarge, so it's
> > > probably not done optimally today. It's an init script run from
> > > /etc/rcS.d.
> >
> > Ah,/etc/rcS.d/S18netfilter-persistent
> > but that does not mention iptables anyplace in it. Whats the diff?
>
> Why should it mention iptables?
>
> By the way, at least with systemd on buster the 'nftables' package is
> set to automatically load rules from /etc/nftables.conf, there is no
> need for any additional packages.
>
> > Or better yet, can this "netfilter" thingy import a set of rules
> > saved from iptables? Hey, I've got an idea, go RTFM. Except there
> > isn't one.
>
> A quick web search found
> https://wiki.nftables.org/wiki-nftables/index.php/Moving_from_iptables
>_to_nftables, which also mentions iptables-translate, according to
> https://packages.debian.org in the package 'iptables' (at least on
> buster).
Printed for both eyes open time of day, looks easy enough. Thank you
Andrei.
> Kind regards,
> Andrei
Cheers, Gene Heskett
--
"There are four boxes to be used in defense of liberty:
soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author)
If we desire respect for the law, we must first make the law respectable.
- Louis D. Brandeis
Genes Web page <http://geneslinuxbox.net:6309/gene>
Reply to: