From nftables wiki
Jump to navigation Jump to search

The page was showing iptables & nft commands issued from the dollar (non-root) prompt when they only work from root. So I changed iptables to iptables-translate (which does work from the dollar prompt) and converted the nft command to being the output from iptables-translate.

From actually trying the examples, I found iptables-translate was always inserting timeout and burst sub-commands. I don't know whether that is deliberate but documented it because that's what happens. I put in the note that you can miss them out because the original nft commands didn't have them. Can someone ack that it makes sense to miss them out please.

The page doesn't flow quite so well now because burst and timeout are mentioned before they are described. If you have any suggestion how this could be improved you can email them to me or implement them yourself.