はてなブックマーク

Next Previous Contents 3. Netfilter Architecture Netfilter is merely a series of hooks in various points in a protocol stack (at this stage, IPv4, IPv6 and DECnet). The (idealized) IPv4 traversal diagram looks like the following: A Packet Traversing the Netfilter System: --->[1]--->[ROUTE]--->[3]--->[4]---> | ^ | | | [ROUTE] v | [2] [5] | ^ | | v | On the left is where packets come in: having pass

The nftables wikiWhat comes after ‘iptables’? Its successor, of course: `nftables` by Florian WestphalMigrating my iptables setup to nftables by Phil SutterAn overview of nftables by Paul GormanExplaining my configs: nftables by Tom HacohenSetting up a server firewall with nftables that support WireGuard VPN by Fredrik JonssonHow to use nftables from python by Arturo Borrero

The netfilter project is a community-driven collaborative FOSS project that provides packet filtering software for the Linux 2.4.x and later kernel series. The netfilter project is commonly associated with iptables and its successor nftables. The netfilter project enables packet filtering, network address [and port] translation (NA[P]T), packet logging, userspace packet queueing and other packet m