Template:nftables/config - Revision history

Vincent: sudo

2016-12-11T10:20:33Z

sudo

← Older revision		Revision as of 10:20, 11 December 2016
Line 59:		Line 59:
	}		}
	</templatedata>		</templatedata>

			== Example ==
			=== Code ===
			<syntaxhighlight lang="text">{{nftables/config\|category=Bind\|tcp_port_in=53\|udp_port_in=53\|tcp_port_out=\|udp_port_out=\|user_out=}}</syntaxhighlight>
			=== Result ===
			{{nftables/config\|category=Bind\|tcp_port_in=53\|udp_port_in=53\|tcp_port_out=\|udp_port_out=\|user_out=}}

	</noinclude><includeonly>Assuming that you configured [[nftables\|nftables as described]], you can edit file <code>/etc/nftables/main_config.conf</code> and add		</noinclude><includeonly>Assuming that you configured [[nftables\|nftables as described]], you can edit file <code>/etc/nftables/main_config.conf</code> and add
Line 71:		Line 77:
	and activate it using		and activate it using
	<syntaxhighlight lang="console">		<syntaxhighlight lang="console">
	# /etc/nftables/reload_main.conf		$ sudo /etc/nftables/reload_main.conf
	</syntaxhighlight></includeonly>		</syntaxhighlight></includeonly>

Vincent: noinclude

2016-08-06T14:55:48Z

noinclude

← Older revision		Revision as of 14:55, 6 August 2016
Line 1:		Line 1:
			<noinclude>
	<noinclude>		<noinclude>
	== Description ==		== Description ==

Vincent: Sort parameters

2016-05-30T22:34:21Z

Sort parameters

@@ Line 10: / Line 10: @@
 			"example": "Web Server",
 			"type": "string"
 		},
 		"tcp_port_out": {
@@ Line 31: / Line 45: @@
 			"description": "Comma separated list of user with unlimited internet access",
 			"example": "root"
+		}
 	},
@@ Line 62: / Line 62: @@
 {{#tag:syntaxhighlight|
 {{If || {{{category|}}} |# {{{category}}}
 }}{{If || {{{tcp_port_out|}}} |add element  inet main  tcp_port_out { {{{tcp_port_out}}} }
 }}{{If || {{{udp_port_out|}}} |add element  inet main  udp_port_out { {{{udp_port_out}}} }
-}}{{If || {{{user_out|}}} |add element  inet main  user_out { {{{user_out}}} }
+}}{{#if: {{{user_out|}}} |add element  inet main  user_out { {{{user_out}}} } }}
 |lang="sh"}}
 and activate it using

Vincent: remove useless whitespace

2016-05-30T22:30:49Z

remove useless whitespace

← Older revision		Revision as of 22:30, 30 May 2016
Line 61:		Line 61:
	</noinclude><includeonly>Assuming that you configured [[nftables\|nftables as described]], you can edit file <code>/etc/nftables/main_config.conf</code> and add		</noinclude><includeonly>Assuming that you configured [[nftables\|nftables as described]], you can edit file <code>/etc/nftables/main_config.conf</code> and add
	{{#tag:syntaxhighlight\|		{{#tag:syntaxhighlight\|
	{{If \|\| {{{category\|}}} \| # {{{category}}}		{{If \|\| {{{category\|}}} \|# {{{category}}}
	}}{{If \|\| {{{tcp_port_out\|}}} \| add element inet main tcp_port_out { {{{tcp_port_out}}} }		}}{{If \|\| {{{tcp_port_out\|}}} \|add element inet main tcp_port_out { {{{tcp_port_out}}} }
	}}{{If \|\| {{{udp_port_out\|}}} \| add element inet main udp_port_out { {{{udp_port_out}}} }		}}{{If \|\| {{{udp_port_out\|}}} \|add element inet main udp_port_out { {{{udp_port_out}}} }
	}}{{If \|\| {{{user_out\|}}} \| add element inet main user_out { {{{user_out}}} }		}}{{If \|\| {{{user_out\|}}} \|add element inet main user_out { {{{user_out}}} }
	}}{{If \|\| {{{tcp_port_in\|}}} \| add element inet main tcp_port_in { {{{tcp_port_in}}} }		}}{{If \|\| {{{tcp_port_in\|}}} \|add element inet main tcp_port_in { {{{tcp_port_in}}} }
	}}{{#if: {{{udp_port_in\|}}} \| add element inet main udp_port_in { {{{udp_port_in}}} } }}		}}{{#if: {{{udp_port_in\|}}} \|add element inet main udp_port_in { {{{udp_port_in}}} } }}
	\|lang="sh"}}		\|lang="sh"}}
	and activate it using		and activate it using

Vincent: Whitespace take 2

2016-05-30T22:22:02Z

Whitespace take 2

← Older revision		Revision as of 22:22, 30 May 2016
Line 61:		Line 61:
	</noinclude><includeonly>Assuming that you configured [[nftables\|nftables as described]], you can edit file <code>/etc/nftables/main_config.conf</code> and add		</noinclude><includeonly>Assuming that you configured [[nftables\|nftables as described]], you can edit file <code>/etc/nftables/main_config.conf</code> and add
	{{#tag:syntaxhighlight\|		{{#tag:syntaxhighlight\|
	{{~~#if:~~ {{{category\|}}} \| # {{{category}}}		{{If \|\| {{{category\|}}} \| # {{{category}}}
	~~<nowiki></nowiki>~~		}}{{If \|\| {{{tcp_port_out\|}}} \| add element inet main tcp_port_out { {{{tcp_port_out}}} }
	}}{{~~#if:~~ {{{tcp_port_out\|}}} \| add element inet main tcp_port_out { {{{tcp_port_out}}} }		}}{{If \|\| {{{udp_port_out\|}}} \| add element inet main udp_port_out { {{{udp_port_out}}} }
	{{~~#if: {{{udp_port_in\|{{{tcp_port_in\|{{{user_out~~\|~~{{{udp_port_out\|}}}}}}}}}}}}~~ \| ~~<nowiki></nowiki>}}~~		}}{{If \|\| {{{user_out\|}}} \| add element inet main user_out { {{{user_out}}} }
	~~}}{{#if:~~ {{{udp_port_out\|}}} \| add element inet main udp_port_out { {{{udp_port_out}}} }		}}{{If \|\| {{{tcp_port_in\|}}} \| add element inet main tcp_port_in { {{{tcp_port_in}}} }
	{{~~#if: {{{udp_port_in\|{{{tcp_port_in\|{{{user_out~~\|~~}}}}}}}}}~~ \| ~~<nowiki></nowiki>}}~~
	~~}}{{#if:~~ {{{user_out\|}}} \| add element inet main user_out { {{{user_out}}} }
	{{~~#if: {{{udp_port_in\|{{{tcp_port_in~~\|~~}}}}}}~~ \| ~~<nowiki></nowiki>}}~~
	~~}}{{#if:~~ {{{tcp_port_in\|}}} \| add element inet main tcp_port_in { {{{tcp_port_in}}~~} }~~
	~~{{#if: {{{udp_port_in\|}}} \| <nowiki></nowiki>~~}}
	}}{{#if: {{{udp_port_in\|}}} \| add element inet main udp_port_in { {{{udp_port_in}}} } }}		}}{{#if: {{{udp_port_in\|}}} \| add element inet main udp_port_in { {{{udp_port_in}}} } }}
	\|lang="sh"}}		\|lang="sh"}}

Vincent: Whitespace

2016-05-30T21:59:09Z

Whitespace

← Older revision		Revision as of 21:59, 30 May 2016
Line 46:		Line 46:
	"example": "4567"		"example": "4567"
	}		}

	},		},
	"description": "~~Show firewall configuration using~~ nftables"		"description": "Configure nftables",
			"paramOrder": [
			"category",
			"tcp_port_in",
			"udp_port_in",
			"tcp_port_out",
			"udp_port_out",
			"user_out"
			]
	}		}
	</templatedata>		</templatedata>
Line 54:		Line 61:
	</noinclude><includeonly>Assuming that you configured [[nftables\|nftables as described]], you can edit file <code>/etc/nftables/main_config.conf</code> and add		</noinclude><includeonly>Assuming that you configured [[nftables\|nftables as described]], you can edit file <code>/etc/nftables/main_config.conf</code> and add
	{{#tag:syntaxhighlight\|		{{#tag:syntaxhighlight\|
	{{#if: {{{category\|}}} \| # {{{category}}} }}		{{#if: {{{category\|}}} \| # {{{category}}}
	{{#if: {{{tcp_port_out\|}}} \| add element inet main tcp_port_out { {{{tcp_port_out}}} } }}		<nowiki></nowiki>
	{{#if: {{{udp_port_out\|}}} \| add element inet main udp_port_out { {{{udp_port_out}}} } }}		}}{{#if: {{{tcp_port_out\|}}} \| add element inet main tcp_port_out { {{{tcp_port_out}}} }
	{{#if: {{{user_out\|}}} \| add element inet main user_out { {{{user_out}}} } }}		{{#if: {{{udp_port_in\|{{{tcp_port_in\|{{{user_out\|{{{udp_port_out\|}}}}}}}}}}}} \| <nowiki></nowiki>}}
	{{#if: {{{tcp_port_in\|}}} \| add element inet main tcp_port_in { {{{tcp_port_in}}} } }}		}}{{#if: {{{udp_port_out\|}}} \| add element inet main udp_port_out { {{{udp_port_out}}} }
	{{#if: {{{udp_port_in\|}}} \| add element inet main udp_port_in { {{{udp_port_in}}} } }}		{{#if: {{{udp_port_in\|{{{tcp_port_in\|{{{user_out\|}}}}}}}}} \| <nowiki></nowiki>}}
			}}{{#if: {{{user_out\|}}} \| add element inet main user_out { {{{user_out}}} }
			{{#if: {{{udp_port_in\|{{{tcp_port_in\|}}}}}} \| <nowiki></nowiki>}}
			}}{{#if: {{{tcp_port_in\|}}} \| add element inet main tcp_port_in { {{{tcp_port_in}}} }
			{{#if: {{{udp_port_in\|}}} \| <nowiki></nowiki>}}
			}}{{#if: {{{udp_port_in\|}}} \| add element inet main udp_port_in { {{{udp_port_in}}} } }}
	\|lang="sh"}}		\|lang="sh"}}
	and activate it using		and activate it using

Vincent: Created page with " == Description == { "params": { "category": { "suggested": true, "label": "Category", "description": "Label be used as category header",..."

2016-05-30T21:40:10Z

Created page with "<noinclude> == Description == <templatedata> { "params": { "category": { "suggested": true, "label": "Category", "description": "Label be used as category header",..."

New page

<noinclude>
== Description ==
<templatedata>
{
"params": {
"category": {
"suggested": true,
"label": "Category",
"description": "Label be used as category header",
"example": "Web Server",
"type": "string"
},
"tcp_port_out": {
"type": "string",
"suggested": true,
"description": "Comma separated list of TCP ports to open from the machine to the internet",
"example": "80, 443",
"label": "tcp_port_out"
},
"udp_port_out": {
"type": "string",
"suggested": true,
"label": "udp_port_out",
"description": "Comma separated list of UDP ports to open from the machine to the internet",
"example": "123"
},
"user_out": {
"type": "string",
"suggested": true,
"label": "user_out",
"description": "Comma separated list of user with unlimited internet access",
"example": "root"
},
"tcp_port_in": {
"type": "string",
"suggested": true,
"label": "tcp_port_in",
"description": "Comma separated list of TCP ports to open from the internet to the machine",
"example": "80, 443"
},
"udp_port_in": {
"type": "string",
"suggested": true,
"label": "udp_port_in",
"description": "Comma separated list of UDP ports to open from the internet to the machine",
"example": "4567"
}

},
"description": "Show firewall configuration using nftables"
}
</templatedata>

</noinclude><includeonly>Assuming that you configured [[nftables|nftables as described]], you can edit file <code>/etc/nftables/main_config.conf</code> and add
{{#tag:syntaxhighlight|
{{#if: {{{category|}}} | # {{{category}}} }}
{{#if: {{{tcp_port_out|}}} | add element inet main tcp_port_out { {{{tcp_port_out}}} } }}
{{#if: {{{udp_port_out|}}} | add element inet main udp_port_out { {{{udp_port_out}}} } }}
{{#if: {{{user_out|}}} | add element inet main user_out { {{{user_out}}} } }}
{{#if: {{{tcp_port_in|}}} | add element inet main tcp_port_in { {{{tcp_port_in}}} } }}
{{#if: {{{udp_port_in|}}} | add element inet main udp_port_in { {{{udp_port_in}}} } }}
|lang="sh"}}
and activate it using
<syntaxhighlight lang="console">
# /etc/nftables/reload_main.conf
</syntaxhighlight></includeonly>

← Older revision		Revision as of 22:22, 30 May 2016
Line 61:		Line 61:
	</noinclude><includeonly>Assuming that you configured [[nftables\|nftables as described]], you can edit file <code>/etc/nftables/main_config.conf</code> and add		</noinclude><includeonly>Assuming that you configured [[nftables\|nftables as described]], you can edit file <code>/etc/nftables/main_config.conf</code> and add
	{{#tag:syntaxhighlight\|		{{#tag:syntaxhighlight\|
	{{~~#if:~~ {{{category\|}}} \| # {{{category}}}		{{If \|\| {{{category\|}}} \| # {{{category}}}
	~~<nowiki></nowiki>~~		}}{{If \|\| {{{tcp_port_out\|}}} \| add element inet main tcp_port_out { {{{tcp_port_out}}} }
	}}{{~~#if:~~ {{{tcp_port_out\|}}} \| add element inet main tcp_port_out { {{{tcp_port_out}}} }		}}{{If \|\| {{{udp_port_out\|}}} \| add element inet main udp_port_out { {{{udp_port_out}}} }
	{{~~#if: {{{udp_port_in\|{{{tcp_port_in\|{{{user_out~~\|~~{{{udp_port_out\|}}}}}}}}}}}}~~ \| ~~<nowiki></nowiki>}}~~		}}{{If \|\| {{{user_out\|}}} \| add element inet main user_out { {{{user_out}}} }
	~~}}{{#if:~~ {{{udp_port_out\|}}} \| add element inet main udp_port_out { {{{udp_port_out}}} }		}}{{If \|\| {{{tcp_port_in\|}}} \| add element inet main tcp_port_in { {{{tcp_port_in}}} }
	{{~~#if: {{{udp_port_in\|{{{tcp_port_in\|{{{user_out~~\|~~}}}}}}}}}~~ \| ~~<nowiki></nowiki>}}~~
	~~}}{{#if:~~ {{{user_out\|}}} \| add element inet main user_out { {{{user_out}}} }
	{{~~#if: {{{udp_port_in\|{{{tcp_port_in~~\|~~}}}}}}~~ \| ~~<nowiki></nowiki>}}~~
	~~}}{{#if:~~ {{{tcp_port_in\|}}} \| add element inet main tcp_port_in { {{{tcp_port_in}}~~} }~~
	~~{{#if: {{{udp_port_in\|}}} \| <nowiki></nowiki>~~}}
	}}{{#if: {{{udp_port_in\|}}} \| add element inet main udp_port_in { {{{udp_port_in}}} } }}		}}{{#if: {{{udp_port_in\|}}} \| add element inet main udp_port_in { {{{udp_port_in}}} } }}
	\|lang="sh"}}		\|lang="sh"}}