Difference between revisions of "Configuring tables"
Jump to navigation
Jump to search
(Created page with "You can also delete tables with the following command: <source lang="bash"> % nft delete table ip foo </source> '''Troubleshooting''': Since Linux kernel 3.18, you can delet...") |
(add page description) |
||
| (5 intermediate revisions by 2 users not shown) | |||
| Line 1: | Line 1: | ||
Some basic operations and commands that you will use to configure tables in the nftables framework. | |||
= Adding tables = | |||
<source lang="bash"> | |||
% nft add table ip filter | |||
</source> | |||
= Show/List tables = | |||
<source lang="bash"> | |||
% nft list tables | |||
</source> | |||
= Deleting tables = | |||
<source lang="bash"> | <source lang="bash"> | ||
| Line 23: | Line 37: | ||
This removes the rules ''for every chain'' that you register in that table. | This removes the rules ''for every chain'' that you register in that table. | ||
'''Note:''' ''nft flush table ip filter'' will not flush '''Sets''' defined within that table, and will cause an error if the table to be flushed does not exist and you're using Linux <4.9.0, which you can overcome by flushing the ruleset. | |||
= See also = | |||
More valuable information: | |||
* [[Configuring chains]] | |||
* [[Operations at ruleset level]] | |||
Revision as of 12:53, 1 February 2018
Some basic operations and commands that you will use to configure tables in the nftables framework.
Adding tables
% nft add table ip filter
Show/List tables
% nft list tables
Deleting tables
% nft delete table ip foo
Troubleshooting: Since Linux kernel 3.18, you can delete tables and its content with this command. However, before that version, you need to delete its content first, otherwise you hit an error that look like this:
% nft delete table filter
<cmdline>:1:1-19: Error: Could not delete table: Device or resource busy
delete table filter
^^^^^^^^^^^^^^^^^^^
Flushing tables
You can delete all the rules that belong to this table with the following command:
% nft flush table ip filter
This removes the rules for every chain that you register in that table.
Note: nft flush table ip filter will not flush Sets defined within that table, and will cause an error if the table to be flushed does not exist and you're using Linux <4.9.0, which you can overcome by flushing the ruleset.
See also
More valuable information: