User contributions
Jump to navigation
Jump to search
- 19:36, 18 December 2020 diff hist −177 Matching packet metainformation →The meta selectors
- 19:34, 18 December 2020 diff hist +31 Matching packet headers →Matching Ethernet header fields: missing source tag
- 22:43, 9 December 2020 diff hist +47 Bridge filtering →Example: Stateful bridge firewall
- 00:00, 6 December 2020 diff hist −1 m Bridge filtering →Stateful filtering: typo
- 23:59, 5 December 2020 diff hist +139 Bridge filtering →Stateful filtering: conntrack bridge provides a replacement for br_netfilter and physdev
- 23:48, 5 December 2020 diff hist +141 Bridge filtering →Bridge chain types
- 23:45, 5 December 2020 diff hist +53 Bridge filtering →Example: Stateful bridge firewall
- 23:30, 5 December 2020 diff hist 0 Bridge filtering →Example: Stateful bridge firewall: incorrect interface to reach the web server
- 23:28, 5 December 2020 diff hist +4 Bridge filtering →Example: Stateful bridge firewall
- 23:28, 5 December 2020 diff hist +1 Bridge filtering →Example: Stateful bridge firewall
- 23:28, 5 December 2020 diff hist +101 Bridge filtering →Example: Stateful bridge firewall
- 23:27, 5 December 2020 diff hist +186 Bridge filtering →Stateful filtering
- 23:16, 5 December 2020 diff hist +33 m Bridge filtering →Bridge chain types: minor nit
- 23:12, 5 December 2020 diff hist +2,107 Bridge filtering add simple example describing connection tracking support for bridge
- 11:59, 5 February 2019 diff hist +2 Meters →Doing connlimit with nft
- 11:59, 5 February 2019 diff hist +1 Meters →Doing connlimit with nft
- 11:59, 5 February 2019 diff hist +306 Meters →Using meters
- 11:55, 5 February 2019 diff hist +1,174 Meters →Doing iptables hashlimit with nft
- 11:46, 5 February 2019 diff hist −41 Main Page →Possible actions on packets
- 11:45, 5 February 2019 diff hist +41 Main Page →Possible actions on packets
- 00:57, 20 June 2017 diff hist +113 Load balancing →Using Direct Server Return (DSR)
- 20:01, 19 June 2017 diff hist −33 Load balancing fix broken example
- 19:02, 14 June 2017 diff hist +110 Load balancing →Using stateless NAT
- 19:00, 14 June 2017 diff hist +9 Load balancing →Using stateless NAT
- 19:00, 14 June 2017 diff hist +10 Load balancing →Using stateless NAT
- 18:57, 14 June 2017 diff hist −1 Load balancing →Consistent Hash-based Distribution
- 18:57, 14 June 2017 diff hist +35 Load balancing →Consistent Hash-based Distribution
- 18:55, 14 June 2017 diff hist +50 Load balancing
- 18:53, 14 June 2017 diff hist +33 Main Page
- 18:52, 14 June 2017 diff hist −99 Main Page A wiki is always work in progress anyway... And documentation got a bit better now, remove this comment.
- 05:05, 8 April 2017 diff hist 0 What is nftables?
- 05:04, 8 April 2017 diff hist +8 What is nftables?
- 16:44, 30 March 2017 diff hist −158 m Building and installing nftables from sources Reverted edits by Arushi (talk) to last revision by AlexanderAlemayhu
- 11:00, 8 February 2017 diff hist −24 Netfilter hooks
- 22:05, 13 July 2016 diff hist −3 Netfilter hooks
- 22:05, 13 July 2016 diff hist −3 Netfilter hooks
- 22:04, 13 July 2016 diff hist −22 Netfilter hooks
- 22:03, 13 July 2016 diff hist +7 Configuring chains
- 20:18, 13 July 2016 diff hist +41 Main Page →Advanced data structures for performance packet classification
- 20:16, 13 July 2016 diff hist +15 Main Page →Videos
- 20:14, 13 July 2016 diff hist +2,439 N List of available translations via iptables-translate tool Created page with "The following '''matches and targets''' (in alphabetic order) can be fully translated via iptables-translate tool: == Translatable extensions == === Matches === ====xt==== *..."
- 20:00, 13 July 2016 diff hist +201 N Ipset Created page with "[http://ipset.netfilter.org/ IPSet] is an extension to allow packet classification based on sets. It is currently maintained and actively developed by the Netfilter coreteam d..."
- 19:59, 13 July 2016 diff hist +2,942 N Jumping to chain Created page with "Like in ''iptables'', you can structure your rule-set in using a tree of chains. To do so, you first need to create the custom chain via: <source lang=..."
- 19:58, 13 July 2016 diff hist +2,253 N Rejecting traffic Created page with "'''Note''': Full reject support is available since Linux kernel 3.18. The following rule shows how to reject any traffic from the network: <source lang="bash"> % nft add rul..."
- 19:58, 13 July 2016 diff hist +1,673 N Logging traffic Created page with "'''Note''': Full logging support is available starting Linux kernel 3.17. If you run an older kernel, you have to modprobe ipt_LOG to enable logging. You can log packets usin..."
- 19:58, 13 July 2016 diff hist +3,726 N Performing Network Address Translation (NAT) Created page with "The ''nat'' chain type allows you to perform NAT. This chain type comes with special semantics: * The first packet of a flow is used to look up for a matching rule which sets..."
- 19:58, 13 July 2016 diff hist +1,702 N Setting packet metainformation Created page with "You can set some metainformation in a packet: one of mark, priority or nftrace. Please note that you require a Linux kernel >= 3.14 to use these features. == mark == The fol..."
- 19:57, 13 July 2016 diff hist +2,799 N Queueing to userspace Created page with "= Basic operation = '''Important note''': You require a Linux kernel 3.14 to enqueue packets to userspace using nftables. Like in ''iptables'', you can use the nfqueue infra..." current
- 19:57, 13 July 2016 diff hist +1,024 N Duplicating packets Created page with "Since Linux kernel 4.3, you can duplicate packets to another destination from the ''ip'' and ''ip6'' families. You may want to use this feature to address this traffic to anot..."
- 19:57, 13 July 2016 diff hist +644 N Counters Created page with "Counters are optional in ''nftables'', thus, you need to explicitly specify them in the rule if you want them. The following example allows you to account all tcp traffic tha..."