Zen

Translation


<computeroutput># </computeroutput><userinput>apt install fwbuildnft add chain filter input { type filter hook input priority 0 \; }</userinput>
<computeroutput># </computeroutput><userinput>nft add chain filter input { type filter hook input priority 0 \; }</userinput>
80/1250 · 125

Sign in to save the translation.

English French Actions
The tools <command>iptables-nft</command>, <command>ip6tables-nft</command>, <command>arptables-nft</command>, <command>ebtables-nft</command> are versions of iptables that use the nftables API, so users can keep using the old iptables syntax with them, but that is not recommended; these tools should only be used for backwards compatibility.
 
Syntax of <command>nft</command>
Syntaxe de <command>iptables</command> et <command>ip6tables</command>
<primary><command>nft</command></primary>
<primary><command>snort</command></primary>
The <command>nft</command> commands allow manipulating tables, chains and rules. The <literal>table</literal> option supports multiple operations: <literal>add</literal>, <literal>create</literal>, <literal>delete</literal>, <literal>list</literal> and <literal>flush</literal>. <command>nft add table ip6 mangle</command> adds a new table from the family <literal>ip6</literal>.
 
To insert a new base chain to the <literal>filter</literal> table, you can execute the following command (note that the semicolon is escaped with a backslash when using Bash):
 
<computeroutput># </computeroutput><userinput>nft add chain filter input { type filter hook input priority 0 \; }</userinput>

<computeroutput># </computeroutput><userinput>apt install fwbuilder</userinput>
Rules are usually added with the following syntax: <command>nft add rule [<replaceable>family</replaceable>] <replaceable>table</replaceable> <replaceable>chain</replaceable> handle <replaceable>handle</replaceable> statement</command>.
 
<command>insert</command> is similar to the <command>add</command> command, but the given rule is prepended to the beginning of the chain or before the rule with the given handle instead of at the end or after that rule. For example, the following command inserts a rule before the rule with handler number 8:
 
<computeroutput># </computeroutput><userinput>nft insert rule filter output position 8 ip daddr 127.0.0.8 drop</userinput>

<computeroutput># </computeroutput><userinput>apt install fwbuilder</userinput>
<primary><filename>/etc</filename></primary><secondary><filename>/etc/nftables.conf</filename></secondary>
<primary>surveillance</primary><secondary>des logs</secondary>
The executed <command>nft</command> commands do not make permanent changes to the configuration, so they are lost if they are not saved. The firewall rules are located in <filename>/etc/nftables.conf</filename>. A simple way to save the current firewall configuration permanently is to execute <command>nft list ruleset &gt; /etc/nftables.conf</command> as root.
 

Loading…

User avatar None

Source string changed

  1. Debian Handbook
  2. 14_security
  3. French

<computeroutput># </computeroutput><userinput>apt install fwbuildnft add chain filter input { type filter hook input priority 0 \; }</userinput>
3 years ago
Browse all string changes

Things to check

Starting newline

Source and translation do not both start with a newline

Reset

Mismatching line breaks

Number of new lines in translation does not match source

Reset

Glossary

English French
No related strings found in the glossary.

String information

Flags
xml-text
String age
3 years ago
Last updated
11 months ago
Source string age
3 years ago
Translation file
fr-FR/14_security.po, string 96