Configuring chains: Revision history

8 October 2024

• curprev 22:5622:56, 8 October 2024‎ Plushkava talk contribs‎ 11,747 bytes +1,309‎ Add a "Syntactic conventions" section in an attempt to bring the standard closer to that of formal documentation; have it subsume the aside regarding matters of shell quoting that was previously in the "Adding base chains" section
• curprev 22:2222:22, 8 October 2024‎ Plushkava talk contribs‎ m 10,438 bytes +79‎ Introduce nft grammar with a consistent style of English; make the flush chain example an example of grammar rather than an example of a shell command (just like how the section on deleting begins)
• curprev 21:5721:57, 8 October 2024‎ Plushkava talk contribs‎ m 10,359 bytes +1‎ Employ a chain name of eth0_filter rather than dev0filter in the ingress hook example (it seems a little clearer)
• curprev 21:4921:49, 8 October 2024‎ Plushkava talk contribs‎ m 10,358 bytes +61‎ Consistently use table/chain names that reflect iptables norms, just as the final <source> block already does
• curprev 21:4021:40, 8 October 2024‎ Plushkava talk contribs‎ m 10,297 bytes −136‎ Use # to denote a shell prompt (as is typical for a root session in virtually any sh implementation, including the ever-popular bash); only include a faux-prompt in examples intended to show shell commands rather than those that act as synopses of nft(8) grammar; don't apply bash syntax highlighting (it hinders more than it helps); employ shell quoting consistently in all examples
• curprev 21:2921:29, 8 October 2024‎ Plushkava talk contribs‎ m 10,433 bytes +10‎ Clean up the synopsis for adding base chains; have it cover "device"
• curprev 21:2021:20, 8 October 2024‎ Plushkava talk contribs‎ m 10,423 bytes −58‎ Correct the synopsis for adding 'regular' chains

1 November 2021

• curprev 18:1418:14, 1 November 2021‎ Fmyhr talk contribs‎ 10,481 bytes +32‎ →‎Adding base chains: Add optional text comment parameter to base chain
• curprev 18:0518:05, 1 November 2021‎ Fmyhr talk contribs‎ m 10,449 bytes +22‎ →‎Deleting chains: generalize delete chain statement
• curprev 18:0218:02, 1 November 2021‎ Fmyhr talk contribs‎ 10,427 bytes +71‎ →‎Adding regular chains: Show optional family, policy and comment attributes.

7 March 2021

• curprev 21:5521:55, 7 March 2021‎ Fmyhr talk contribs‎ 10,356 bytes −1‎ 'non-base chain' -> 'regular chain' as in manpage.
• curprev 21:4621:46, 7 March 2021‎ Fmyhr talk contribs‎ m 10,357 bytes +6‎ →‎Base chain hooks: Bolded hooks link to encourage following it.
• curprev 21:4421:44, 7 March 2021‎ Fmyhr talk contribs‎ 10,351 bytes −4,194‎ →‎Base chain priority: Moved priority table and some of discussion to Netfilter hooks page.

23 February 2021

• curprev 12:1912:19, 23 February 2021‎ Fmyhr talk contribs‎ 14,545 bytes +1‎ →‎Adding base chains: Moved description of base chain to top for clarity.

15 February 2021

• curprev 12:5012:50, 15 February 2021‎ Fmyhr talk contribs‎ 14,544 bytes +49‎ →‎Base chain priority: Improved descriptions of NF_IP_PRI_CONNTRACK, NF_IP_PRI_CONNTRACK_CONFIRM
• curprev 12:1612:16, 15 February 2021‎ Fmyhr talk contribs‎ m 14,495 bytes +46‎ →‎Base chain priority: improved description of NF_IP_PRI_CONNTRACK_HELPER
• curprev 12:0912:09, 15 February 2021‎ Fmyhr talk contribs‎ 14,449 bytes +90‎ →‎Base chain priority: Added hook for NF_IP_PRI_CONNTRACK, link to conntrack refs
• curprev 12:0012:00, 15 February 2021‎ Fmyhr talk contribs‎ 14,359 bytes +274‎ →‎Base chain priority: Added NF_IP_PRI_CONNTRACK_CONFIRM

13 February 2021

• curprev 18:2018:20, 13 February 2021‎ Fmyhr talk contribs‎ 14,085 bytes +172‎ →‎Adding non-base chains: Add note about using vmaps to construct efficient branched rulesets
• curprev 18:1218:12, 13 February 2021‎ Fmyhr talk contribs‎ 13,913 bytes +100‎ →‎Adding non-base chains: Clarify non-base chain, compare with iptables user chain
• curprev 17:5817:58, 13 February 2021‎ Fmyhr talk contribs‎ 13,813 bytes +173‎ Rewrite intro section
• curprev 16:0316:03, 13 February 2021‎ Fmyhr talk contribs‎ 13,640 bytes +129‎ →‎Base chain priority: Noted ability to specify integral offset of priority keywords
• curprev 14:2114:21, 13 February 2021‎ Fmyhr talk contribs‎ 13,511 bytes −59‎ →‎Flushing chain: clarity
• curprev 14:1814:18, 13 February 2021‎ Fmyhr talk contribs‎ m 13,570 bytes −21‎ →‎Deleting chains: grammar
• curprev 14:1414:14, 13 February 2021‎ Fmyhr talk contribs‎ 13,591 bytes +235‎ →‎Adding non-base chains: Expanded a bit on using trees of chains; added goto action.
• curprev 14:0314:03, 13 February 2021‎ Fmyhr talk contribs‎ 13,356 bytes −23‎ →‎Base chain hooks: Clarity
• curprev 13:5013:50, 13 February 2021‎ Fmyhr talk contribs‎ m 13,379 bytes +6‎ →‎Base chain types: Grammar, clarity
• curprev 13:4313:43, 13 February 2021‎ Fmyhr talk contribs‎ m 13,373 bytes −22‎ →‎Adding base chains: Grammar
• curprev 13:3213:32, 13 February 2021‎ Fmyhr talk contribs‎ m 13,395 bytes +158‎ →‎Base chain priority: Added link to Pablo's connection tracking paper.
• curprev 13:1713:17, 13 February 2021‎ Fmyhr talk contribs‎ 13,237 bytes +42‎ →‎Base chain priority: Added hook locations for defrag, a few others (some still missing).
• curprev 12:5212:52, 13 February 2021‎ Fmyhr talk contribs‎ 13,195 bytes +2,752‎ →‎Base chain priority: Moved base chain priorities to table, emphasized that relative numerical order within a hook is what matters.

11 February 2021

• curprev 23:1923:19, 11 February 2021‎ Fmyhr talk contribs‎ m 10,443 bytes +22‎ →‎Base chain hooks: link Netfilter hooks page

30 December 2020

• curprev 23:4523:45, 30 December 2020‎ Plushkava talk contribs‎ m 10,421 bytes +9‎ Correct wording concerning the default chain policy
• curprev 23:2823:28, 30 December 2020‎ Plushkava talk contribs‎ 10,412 bytes +882‎ Explain base chain traversal in the case of multiple equivalent hooks in slightly more detail

3 September 2020

• curprev 09:5609:56, 3 September 2020‎ Arturo talk contribs‎ 9,530 bytes +152‎ →‎Base chain priority: mention priority strings

3 July 2020

• curprev 17:5317:53, 3 July 2020‎ Jesper talk contribs‎ 9,378 bytes +32‎ Mention 'foo' table must be created prior to this command

23 June 2020

• curprev 22:5022:50, 23 June 2020‎ Fw talk contribs‎ 9,346 bytes +656‎ convert quoting style to single-quotes, some shells such as zsh also require quoting of curly braces. route/nat now work with inet family.

28 August 2019

• curprev 23:3423:34, 28 August 2019‎ Arturo talk contribs‎ 8,690 bytes +78‎ →‎Adding non-base chains: make more explicit that chain name can be arbitrary and clarify the example

30 July 2019

• curprev 13:5113:51, 30 July 2019‎ Arturo talk contribs‎ 8,612 bytes +117‎ →‎Base chain policy: be more explicit about policy default

31 January 2019

• curprev 23:5123:51, 31 January 2019‎ Fw talk contribs‎ m 8,495 bytes −85‎ drop is terminal.

14 November 2018

• curprev 17:0817:08, 14 November 2018‎ Fw talk contribs‎ 8,580 bytes +152‎ →‎Base chain priority
• curprev 16:1516:15, 14 November 2018‎ Fw talk contribs‎ 8,428 bytes +47‎ drops are instant, there is no re-evaluation by other hooks.

21 November 2017

• curprev 23:0723:07, 21 November 2017‎ Duncan talk contribs‎ m 8,381 bytes −1‎ Change "package" to "packet"
• curprev 19:4219:42, 21 November 2017‎ Arturo talk contribs‎ 8,382 bytes −21‎ →‎Base chain priority: delete double table in the example
• curprev 19:3819:38, 21 November 2017‎ Arturo talk contribs‎ 8,403 bytes +502‎ →‎Adding base chains: add base chain policy documentation
• curprev 19:3319:33, 21 November 2017‎ Arturo talk contribs‎ 7,901 bytes +18‎ →‎Adding base chains: add policy to the example
• curprev 19:3219:32, 21 November 2017‎ Arturo talk contribs‎ 7,883 bytes +17‎ rearange sections
• curprev 19:3019:30, 21 November 2017‎ Arturo talk contribs‎ 7,866 bytes +827‎ →‎Base chain types: create a section for priority and add example of priority ordering

13 July 2016

• curprev 21:0321:03, 13 July 2016‎ Pablo talk contribs‎ 7,039 bytes +7‎ No edit summary
• curprev 18:5118:51, 13 July 2016‎ Pablo talk contribs‎ 7,032 bytes +7,032‎ Created page with "As in ''iptables'', you attach your rules to chains. However, contrary to the ''iptables'' modus operandi, the ''nftables'' infrastructure comes with no pr..."