Zen

Source string Source string

355/10000 · 355

The string is read only.

English Actions
Although (destined to) being replaced by nftables, <command>iptables</command> is still widely used and suited for many use-cases. Creating a rule requires an invocation of <command>iptables</command>/<command>ip6tables</command>. Typing these commands manually can be tedious, so the calls are usually stored in a script, so that the same configuration is set up automatically every time the machine boots, or they can be made “persistent“ using <emphasis role="pkg">iptables-persistent</emphasis>.
A script usually needs to be written by hand. But there are, tools that make it simpler to configure the <emphasis>netfilter</emphasis> firewall, with a graphical representation of the filtering rules. <command>fwbuilder</command> is undoubtedly among the best of them. The rules are created with simple drag-and-drop actions on objects (interfaces, networks, ports, servers, etc.). A few contextual menus can change the condition (negating it, for instance). Then the action needs to be chosen and configured.
An alternative to writing and saving/loading the required rules is to use <command>ufw</command> from the package with the same name. This tool is a frontend to <command>iptables</command> as well, but it provides a command line interface only. Simple commands can enable or disable (block) network traffic to and from ports and IP addresses. The configuration files in <filename>/etc/ufw/</filename> also allow for complex rule sets (e.g. hooking into the Docker chains), which are then saved and loaded automatically. This tool is often used for simple setups and to block incoming traffic on ports which cannot be assigned to a limited set of interfaces or closed appropriately.
<primary><filename>/etc</filename></primary><secondary><filename>/etc/ufw/</filename></secondary>
To enable a default firewall in Debian execute:
<computeroutput># </computeroutput><userinput>apt install -y nftables
</userinput><computeroutput>Reading package lists... Done
...
# </computeroutput><userinput>systemctl enable nftables.service</userinput><computeroutput>
Created symlink /etc/systemd/system/sysinit.target.wants/nftables.service → /lib/systemd/system/nftables.service.
</computeroutput>
nftables Behavior
<primary>nftables</primary>
As the kernel is processing a network packet, it pauses and allows us to inspect the packet and decide what to do with that packet. For example, we might want to drop or discard certain incoming packets, modify other packets in various ways, block certain outgoing packets to control against malware or redirect some packets at the earliest possible stage to bridge network interfaces or to spread the load of incoming packets between systems.
<primary>OSI</primary>
<primary>Open Systems Interconnection</primary><see>OSI</see>

Loading…

User avatar None

Source string added

  1. Debian Handbook
  2. 14_security
  3. English
<computeroutput># </computeroutput><userinput>apt install -y nftables
</userinput><computeroutput>Reading package lists... Done
...
# </computeroutput><userinput>systemctl enable nftables.service</userinput><computeroutput>
Created symlink /etc/systemd/system/sysinit.target.wants/nftables.service → /lib/systemd/system/nftables.service.
</computeroutput>
3 years ago
Browse all string changes

Things to check

Ellipsis

The string uses three dots (...) instead of an ellipsis character (…)

Reset

Multiple failing checks

Following checks are failing:
Unchanged translation: Norwegian Bokmål, German, Indonesian, Swedish, Chinese (Simplified), Catalan, Italian

Reset

Glossary

English English
No related strings found in the glossary.

String information

Flags
read-only, xml-text
String age
3 years ago
Last updated
11 months ago
Source string age
3 years ago
Translation file
string 51