Forum
  • Search
  • Member List
  • Calendar
Hello There, Guest! Login Register — Login with Facebook

Security of your pi (and lan): iptables vs nftables
Thank you for your donation

Thread Closed 
 
Thread Rating:
  • 0 Votes - 0 Average
  • 1
  • 2
  • 3
  • 4
  • 5
Threaded Mode | Linear Mode
Security of your pi (and lan): iptables vs nftables
23rd Nov, 2019, 08:04 PM
Post: #1
Roy Terhaar Offline
Registered
Posts: 60
Joined: Jan 2015
Reputation: 6
Security of your pi (and lan): iptables vs nftables
This is just something I want to share since it affects the security of your raspberry pi and probably your LAN too...
I found out after upgrading to Buster that iptables was no longer working.
(I am using iptables in combination with fail2ban)

It seems that by default it has been changed to nft (iptables-nft) in Buster.
Fortunately you can still use the 'old' iptables (or you can decide to use and reconfigure stuff with nft).

This shows the available options:
# update-alternatives --list iptables
/usr/sbin/iptables-legacy
/usr/sbin/iptables-nft

With following command you can choose the legacy (old) iptables selecting 1:
# update-alternatives --config iptables

There are 2 choices for the alternative iptables (providing /usr/sbin/iptables).

Selection Path Priority Status
------------------------------------------------------------
0 /usr/sbin/iptables-nft 20 auto mode
* 1 /usr/sbin/iptables-legacy 10 manual mode
2 /usr/sbin/iptables-nft 20 manual mode

Press <enter> to keep the current choice[*], or type selection number: 1
Find all posts by this user
24th Nov, 2019, 11:17 PM
Post: #2
deHakkelaar Offline
Administrator
******
Posts: 360
Joined: Dec 2012
Reputation: 23
RE: Security of your pi (and lan): iptables vs nftables
Good to know:

https://wiki.debian.org/iptables

There are only 10 types of people in the world: those who understand binary, and those who don't
Find all posts by this user
25th Nov, 2019, 01:08 AM
Post: #3
Nachteule Offline
Administrator
******
Posts: 2,405
Joined: Dec 2014
Reputation: 122
RE: Security of your pi (and lan): iptables vs nftables
I already did this, but thanks for posting anyway Cool
Find all posts by this user
16th Mar, 2023, 12:09 PM
Post: #4
farymo Offline
Banned
Posts: 2
Joined: Mar 2023
RE: Security of your pi (and lan): iptables vs nftables
Nice, but I already tried this. Thanks for publishing anyhow.
Find all posts by this user
« Next Oldest | Next Newest »
Thread Closed 


  • View a Printable Version
  • Send this Thread to a Friend
  • Subscribe to this thread
Forum Jump:

Current time: 10th May, 2025, 09:06 AM Powered By MyBB, © 2002-2025 MyBB Group.