Template:nftables/config

Description

Configure nftables

Template parameters

Parameter		Description	Type	Status
Category	category	Label be used as category header Example Web Server	String	suggested
tcp_port_in	tcp_port_in	Comma separated list of TCP ports to open from the internet to the machine Example 80, 443	String	suggested
udp_port_in	udp_port_in	Comma separated list of UDP ports to open from the internet to the machine Example 4567	String	suggested
tcp_port_out	tcp_port_out	Comma separated list of TCP ports to open from the machine to the internet Example 80, 443	String	suggested
udp_port_out	udp_port_out	Comma separated list of UDP ports to open from the machine to the internet Example 123	String	suggested
user_out	user_out	Comma separated list of user with unlimited internet access Example root	String	suggested

Example

Code

{{nftables/config|category=Bind|tcp_port_in=53|udp_port_in=53|tcp_port_out=|udp_port_out=|user_out=}}

Result

Assuming that you configured nftables as described, you can edit file /etc/nftables/main_config.conf and add

# Bind
add element  inet main  tcp_port_in { 53 }
add element  inet main  udp_port_in { 53 }

and activate it using

$ sudo /etc/nftables/reload_main.conf