new to nft
François Patte <[email protected]> Wed, 13 Jan 2021 17:40:20 +0100
| Newsgroups | gmane.linux.debian.devel.firewall |
|---|---|
| Organization | Université Paris Descartes |
| Message-ID | <[email protected]> |
This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --Nje5SULJhCKmlosCcqso9yGNAgn4vY5Gm Content-Type: multipart/mixed; boundary="UevvUGqidaNbCCXZfVHdukMp7JKAjOAwz"; protected-headers="v1" From: =?UTF-8?Q?Fran=c3=a7ois_Patte?= <[email protected]> To: [email protected] Message-ID: <[email protected]> Subject: new to nft --UevvUGqidaNbCCXZfVHdukMp7JKAjOAwz Content-Type: multipart/mixed; boundary="------------AC40019453B25BB483A3C374" Content-Language: fr-FR This is a multi-part message in MIME format. --------------AC40019453B25BB483A3C374 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: quoted-printable Bonjour, I begin to use nftables and wrote thes rules: chain input { # handle 1 type filter hook input priority 0; policy drop; ct state established,related accept # handle 4 ip saddr 192.168.1.0/24 accept # handle 5 ip6 saddr fe80::/10 accept # handle 6 ct state invalid drop # handle 7 iifname "lo" accept # handle 8 tcp dport 22222 accept # handle 9 log # handle 10 } I expect to block all traffic from anywhere except on the local network=20 (192.168.1.0/24) Is "fe80::/10" the ipv6 corresponding syntax for ipv4 192.168.1.0/24? I expect too accept connections from the internet to port 22222 The last line "log" is (for me) supposed to log all dropped packets, am=20 I right? For this last line, logwatch reports "logged packets on interface". logwatch with iptables reports "drop packets on the interface" Are these packets dropped or only logged? Thank you for your explanations. Regards. --=20 Fran=C3=A7ois Patte UFR de math=C3=A9matiques et informatique Laboratoire CNRS MAP5, UMR 8145 Universit=C3=A9 Paris Descartes 45, rue des Saints P=C3=A8res F-75270 Paris Cedex 06 T=C3=A9l. +33 (0)6 7892 5822 http://www.math-info.univ-paris5.fr/~patte FSF https://www.fsf.org/blogs/community/presenting-shoetool-happy-holidays-fr= om-the-fsf --------------AC40019453B25BB483A3C374 Content-Type: application/pgp-keys; name="OpenPGP_0x744E82D9D855D895.asc" Content-Transfer-Encoding: quoted-printable Content-Disposition: attachment; filename="OpenPGP_0x744E82D9D855D895.asc" -----BEGIN PGP PUBLIC KEY BLOCK----- xsDiBEI1fdMRBACpPxrD/B2pHUPHchL+8QAOFZX35wLqvE5mUxUxLU6E0FvwXJ+A9R4FfpHel= XiC aeO27hW4g3owes6eWEtZS1f6tXCoUWvLttLCodQcC/JQtnW72YujgvygjQKMKBWNRk+9YNGZ0= an+ +BOarOSZDt+7xqvJXgSmJiwvUkO1T4362wCg2ER+jQO1M56UdFmhHaS/77jMEfUD/i26BuZu+= RLl Q5bpiZIUOBsvegcXxL6sXi/uQy18bfhiKh4+5DDhfoQ+qOvmCSt227U+c8Qk+3KD2lDMrOqXf= cX2 F+FVx1OOGr5tfIfgS1VXh4ED8Q2QxgwZIEqWmHpHTLOJq1Ant3HYhV7/52zOjB/uTXtg/tnhp= B19 H/o1EhxoBACpOLfMslUxJ0JafuWzuVI/kAxtZV2sviRMn4K2hi2fxT1B0PbYgf5tbdj/4HBko= 7ZK oFbgZSyb1bwmx09NjKETp+cpMHWrJnzVaw34dVBXLX0cYGrA/zCyXe3h+6YRIMdbQiM6JrWs0= IL2 iIKsE+Jy4K3TzKDoBIVeEWJ4Lu/1XM00RnJhbmNvaXMgUGF0dGUgPGZyYW5jb2lzLnBhdHRlQ= G1p LnBhcmlzZGVzY2FydGVzLmZyPsJjBBMRAgAjAhsDBgsJCAcDAgQVAggDBBYCAwECHgECF4ACG= QEF Aks2AOMACgkQdE6C2dhV2JVauQCfTNGay56QxPlBwZ6tAXEbwMS1pjYAnj8XMw9THvaJiTDY9= AYd hUOxHwSCwmAEExECACAFAkkV2zYCGwMGCwkIBwMCBBUCCAMEFgIDAQIeAQIXgAAKCRB0ToLZ2= FXY lUxJAJ9Lii78Tun2FiClG7QrRXw0MbbTKwCfbcl66LTmbV06KTL6lnY4CyAGtqnNRUZyYW5jb= 2lz IFBhdHRlIChVbml2ZXJzaXRlKSA8ZnJhbmNvaXMucGF0dGVAbWF0aC1pbmZvLnVuaXYtcGFya= XM1 LmZyPsJeBBMRAgAeAhsDBgsJCAcDAgMVAgMDFgIBAh4BAheABQJLNgDoAAoJEHROgtnYVdiV0= 4AA nihp7tPzZ1fISw1lj/X1qlEDhfh+AKCwtfIChSMuz6lKFy+YnfA4bn2WmMJeBBMRAgAeAhsDB= gsJ CAcDAgMVAgMDFgIBAh4BAheABQJJFdj3AAoJEHROgtnYVdiVEzUAn0YktovlSpEGRS478jOCH= g+u NYdTAKDHz8K3QIbK28YHgSPuKp0WmWfw4cJeBBMRAgAeAhsDBgsJCAcDAgMVAgMDFgIBAh4BA= heA BQJJFdaPAAoJEHROgtnYVdiV0KcAoNdcgIaHxa2MYp2iZ60SVGoU6j56AKCGOTYiRwj+DIoGZ= TSb Q8ZkppD9e8JkBBMRAgAkBQJCNX3TAhsDBQkJZgGABgsJCAcDAgMVAgMDFgIBAh4BAheAAAoJE= HRO gtnYVdiV14wAnjYejaMScSmzaMIbC8QF0L0VakAQAJ43osoSYb6t9tMy9ppK8aw3DxqHQtHLI= Mse ARAAAQEAAAAAAAAAAAAAAAD/2P/gABBKRklGAAEBAQBIAEgAAP/bAEMAFg8RExEOFhMSExkXF= hoh NyQhHh4hRDAzKDdQRlRTT0ZNTFhjf2xYXnhfTE1ulnB4g4eOkI5Wapynm4qmf4uOif/bAEMBF= xkZ IR0hQSQkQYlbTVuJiYmJiYmJiYmJiYmJiYmJiYmJiYmJiYmJiYmJiYmJiYmJiYmJiYmJiYmJi= YmJ iYmJif/AABEIAJ8A8AMBIgACEQEDEQH/xAAaAAACAwEBAAAAAAAAAAAAAAABAgADBAUG/8QAN= BAA AQMDAwIFBAECBgMAAAAAAQACEQMhMQQSQVFhBRMicYEyQpGhsSPRFSRiwfDxM1KS/8QAFwEBA= QEB AAAAAAAAAAAAAAAAAAECA//EABsRAQEBAQADAQAAAAAAAAAAAAABEQISITFR/9oADAMBAAIRA= xEA PwDySiigygiiJEFQZQBSFcwyFHWbHRBUopwogCiKCCIgDlBRAxgIFBRAQmS3yhJQOgcISpNkA= UUU QRRRRBFFFEEUURAQBThGO/6RiT2CBYURQQHajsKZMgTYUC0g/tWqFu5vdAoYdoIN0Hl0Q4fKd= p/p 4uFWXOOSUAygjCVAZUygogKCiICCAElaaWlLhO6DwrdHQa5zS5sj+V2KdFoaPQ0FTVkt+OcdM= 59N pLJdHqt+1z61EsuAvRFtQTDrHIysr9GXy1o94GE0vNjgqLZrtKaL9wu08hZFUBRFRAFFFEEUU= UQQ IiQLKDr0V2mZurN7XQIKdV2GuTGjUDfoK1F7osB/w2QNQwTA5/mAgxPBbYghKtxe0yHC189ln= rsa wjaIJ4QJKIISKILZHVEOVSZo3GEFggE3yqqgh89VZtAEnhENa4SIIQUoBaCxgiYugaI4JCGqY= CCa 4shCAIqQrKNM1X7BMkGAOSg6/hwL2t3CzRAXUp0w85suV4dUcykwFoAJhb2aprHbXNA6LN+uv= NyL X09roV9OkwU90w6LrK+s11ydvugazowQEid+4o11JtQHec2suBqKPlVC2ZHBXoDUa6pfBsVxf= ECD qnBt2jB6rTkyKJkIRQURhSEAURhRAOIC1adpZTe+OwVdGmDTqVDhv7V49OlZOXmUCF8cG2PgW= U3N EXx/sP7o2SkBZ1rxS1gT0B/kqnUO3VT2srhAdJwLlZ3iL9VYzgKIqKiKyiJJSAK2iLlAtI+og= 3B4 Rp2Bb0KXDvlP957oI69Rna6lNxdVcZthQ2fPRqFEQR7IhXj1u90ITuHrd7lCEUsIj0mQYjlGF= C2R HVB3dIBTa3cQCBK07WEAbPTwVj0+9+novAwII6rczcfqNuiy6S+iii1plrRuOTlSs9tIXEwJi= Mq9 rQLC6weJPiGN+oi/smM3oPOpuYS0AkjJ4XCqONR5cVoqgmW3A5WcsLVpksKQjCiAIIqIAoipC= C8y 3RNaM1HSneQdobhohXOFJop032Ib0wl8hr703td7FCKUCrHUKg4n4VZa4cLONaR0kbRlxAQ1Q= a2r saMBW0WHzw52GglZnuL3uceTK0zUUQlEFAVbRyVTdEEjBKBjk+5TfcPZJfqiCZHKIc/V8KMsQ= oLw UW8e8IFIlzvcqQmH1O9yjhRSojEqQSbpgMDug26TXNoMbSqsIaPvF/ytx1dOsIova4cmcLkC6= lB7 qVRzgAXcHgIOxU1Jo0wG/UVz3EudJMkpd9QmXQ4nqg50ulESqxpbAysxBha7Ae6rIlvygybVC= FcG AkjtZVwikhCE8XU+FQnwnoM31mN6lQtVumEOe/8A9GlAtR+6rWfPYLNF1Ze6EIC2tWZio78yr= aWp qucGu2kdSFQQUWWDupsEGqrU/wAqXQGl1rLCtOq9OykPtF/dZ0EARhEA5iyMdEQvwjCYBEggx= EIg AKBEBCWzkoCASmDSOVdpqjaNZtQtDmjIPIXXo6Hw/W0y6hUhx4DsfCjUmuFYWhHuLroazwjU6= cF4 AqMF5GfwudMCwlAZ5RpmSSqnPAz+FdSE0wQMoHm8Jg05CWPUrRYXRBwO6DWzc44UJTcBBJ23z= 7KH q24KO7pcpQ6HFpETdAsQ+RzKbU06R09CtTs50tqDuOflL9x9lUJiQUCGMIFWGDEygBeEUhHRO= 1wb Re37nFCBPKkdJjugrP4UTlspYQLCsoMDqo6C5SQnY4MY8fc4QEFdV297ndSqynISkKhg0nAnl= ECb BadIxjjuqNJGIBytVJ1OlX2+W1sWI5Q8XODXtw0/hMylVqmGs+Su4AxwkAKuq+nRG4wFNPFmp= +GB 1M+Y47iM9Fu8O0raVJrXUmPgmXAAz+Viqa2q4HYNo6q7w7WjzDQfua+JBFwUqyx1jp9GRfTNv= /oT UdHpWO3UqDGnq1sJqNZxb/5GK5tR0Sdp9llpTVbtJEnsCV53xfQFn9egCAT6mgftehe6TygWN= eNp EgpqWPGt0rjeoY7LQBtaAOi72o8JpVATTJYf0uVqNJW05PmN9PBC1us2MxMEosMgXSup7rgwU= u19 O49QRF56JzMWWdtWbwrQ8PNnfCCxohCoAQDNwZQDS27T8FKTcm0BAr5cSBjkotAsMAJRAvf5R= ZLi Y6wgZwthKROYThpmEDbhVCEYICUi2FaQJthAtPZFVc8f3UKfb0Q2/wDSiqoQIVkTnPulcECQl= IVk dCkPKC11RxgUhttE9U2movq1ry0geskqqT8q1lSo1rod9WTCpOv1s1Gr8seXRAnE8BZS4vdL3= bj/ AAkETCsIDRBBSM26eWRMX7Ksgkh7Dte27SOEAL2EJ2tk5VYaqPj1Sh6NTpw48uHK1s8c0lQZL= CeC Fy302hkyD2WPVACrta0AgXgKY6TvXo/8S0ov5zfytOn1dGrdtRpno5eNg9FAXMMglp6iymNa9= 2HA 4Kz+JN8zRvA4grzml8WrUoFT1jryuvS8Rpaii5ocLtII5UxXMdSvIKrJc0XC0EhK7aVWGUtEk= 3HZ MAALfT2KclpaAALqAAW4QKDeCARwU5s0i0eyQdOyhPpgZKCNG+oGjBMK/a2SAIuqqQ2vbHBWi= Tti 3uqE+kY9knwnE9PiFCQRbI5RCfF1PzKJMi5QFjygBH5CBuZEyiTF+UDByLwiq3C95UIBATECI= I/C TGDKKU8ykPZWFIR+ECsO7CsaDKzsdtM8K8VOghGasuJECIUF/wAJC4nlM2ScqsntbhNT+sEiR= mEN s8FWUwAQCbTcoyZ+xxBDYi5usVJjq9d7gteseGaYuaeYCr0TdunwJccnhRvmLw0BoBmwyh5c2= MOn hO4YAFuFo0tIF++LDCNMVXQtax1TZ6hwP5WIsAdLSQeoXpXASAs2p8NZWG6mNj+vBQc7coHGY= lUu 3NcRyCoCRcmAFBZtjYO6LrOAGUvnUiBLxa8GyAqtcS6RbugJvvi3RDcCVWagNgdxi8JmAgS7K= C6l 9c9AtABIJVNFsDfxNp5VsEyQYtwqBiDie6DpxOB1TgbhZB7YaZIBH7QVu4IA9lBJEm3ZM4OJO= 0fC G0xdCRWR6ri3ZKZGOVbHSxSkQfVPwgQ9SkebC09FZYjHKV4h/ZQIcTkJCAncYgAyECLSqMiem= 77S q0QitAcP+WRE9vwlpkuFoEZTWOSSjFWB05KuaA4gBUspngBXFxZSLjc4CrLNq3+bWbTbZoWyN= gDY mOmFXpPDa1R5fVhoJveSuuyg1rfQB88qNxipsNV1rDEhdBgFMBo6KNog3j8K1tNoFs9UVWWlx= DgI jKdu4ZKdojKePwormN8Ja5xNSu8yZhoAV7PC9G0Xp7j1cSStcAWP/SMx7IMR8M0l4Yf/AKKx6= jwl pk0z8P8A7rskBIUHmqmi1tIQKZLf9EFWabSVn0z5zHNJc0NmxjldyoYNvdU1HwJ5F0GfVNb5o= axg DKQ2t7JGtiSL8IsBeC4+90R9Vh6Y68qslFwbhLF5ymEB2yxd1/2QG4CQbIoQdstx0UeLiOBdE= n1x t56pXS1xHJUUNoFwcftKGgTBtMXKsaIaJAg5SOAAiMoEMX9VvZJaSHXE8JjJEm4SuEiQfdBW5= mY4 P6VZBHXsroJbFuqrJxKo/9nCYAQTEQIAIAIbAwYLCQgHAwIEFQIIAwQWAgMBAh4BAheABQJLN= gDo AAoJEHROgtnYVdiVbbwAmwaRMju2SQsNdZbeHNiLx5Z0eXyGAJ9HxnDns5ap13eTam5Rzxhn/= Zfo j87DTQRCNX6uEBAA7uE6LpV9gHCbVZSxUf2TufXim1AGuAtlTzJJvVebfqlJhCRuS82qLVikK= +Wc o69F72F2Tjb0gBuAsniKAex7Ui8+3HHkQtGFdNcydR2SyqiSUk6ExG3z3ghhD5vkW3KBB8oG+= aVo gdNaN+10sVR/H1LVL+vWycF0Amjn0NVhptZPbhjQ4CeYSj1g6++lFx2OXZumfQuj4cs1+KvnQ= u2j YlZKYc5IjudL5lYlryFaTk2B5XRxDIhWBVDPY6KW3OJyEuY/RTtoGopWk4u1x5pwsLZAMn+J+= rO7 A5uHhdY42FMKAemfbdvGBipdXdMnwC+KtOsveIbuivALDSaqV4+x+QfSyK0D3MQeQ/+uekC9j= WdA /Rd10p6p9RdPawILDNIVd4vPMuX2i/l6Eojmow14gjkeWLf9zkEBcb4NdD+knelYdDRgtDQHe= qTS okDzCn8SUSrpJUFTapPE9+6U5K+gNceGeJcWyQWLBSXXZVwK1xCnYSA6noV2N3lEFVVTK7R4h= ijz zNrUrNbaKcG0F0ZZBsgK3NSMAAXUWfknU9ZnWmg2EO66/9FIlwo2MQsHdFS/GuIIXiLs9Qzjy= Go2 F5zgy232pu4eY53RBIPFumfGjkr6j9EUG2tvJofx5V3fAvjxD+X7bRJuqvBp7wbUkBrIi83f+= q+Q mJmuMIPIyTLby4cABAsQAKz8R1M1GIDoNbvEtL41f7J6ty1ZLICVO6I40jZdiBe92i0ImHZDD= v5H w7NU7gFA9oZ5I+o4h+9HPr7Ah1A1jLJWhZDqcO/F5qyHFnk4IruQorIeJMxJEAA59N/iyk+Hp= 9mP zK82rD6sSj1sET0uwhC5s2qVuEOrARCFW/JMpxYQRh9V7cWLaeZGvPLXVLlB2Yky2G5bJhqES= iX4 mYoAp7Vn+ByO5XnDqeutMhOSfGWlGUN0BA26robjhiZh5BVmVBHfJQrxrjn00HSMx87cziBMJ= j+p B4Q404JFepfjTZBA3TdUPf9RwWpyuS/Uqvcav3jPCyK4CVtiYS6HpBMbOR1Qkw3AwV9F+WJR4= ewB 7aBrrsFhQ1nJqLbftSNH3GQihWh7VdMzFFAKUZybZ+Z5fXe03fUtDRrXJZhg0tBv84lIc+n3c= AKL tJdT8YegDo68tsBELHeCNaYYr2FU4t37/d0A/x8l08SxaRn8bRJirOjaiQCalWlD5TNYcUoAm= NN4 Qu4FYW7qG7D8520Wnq8EbJ2rxWe/SsmhF/qlUW/SdH3pRIbbyOS8Q4CTwprU+XY6uk9Shm3GE= 6lH LoFE73z9mRLyLjArunulgBEDYgj3NOrWCwpfwqO15bXBT1+Ch1ohRI2fdNszVrIbd+C6eNyv3= c2r GmzVEEMYS3qOzMt3XFeTwkkEGBECAAkCGwwFAks1/6MACgkQdE6C2dhV2JVWMwCg1YHGDVx8/= YJg yLsQWpzfwvFiFbIAn1WGwX5/6xK/eGEsEBALsZ2UULnB =3DIlZm -----END PGP PUBLIC KEY BLOCK----- --------------AC40019453B25BB483A3C374-- --UevvUGqidaNbCCXZfVHdukMp7JKAjOAwz-- --Nje5SULJhCKmlosCcqso9yGNAgn4vY5Gm Content-Type: application/pgp-signature; name="OpenPGP_signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="OpenPGP_signature" -----BEGIN PGP SIGNATURE----- wmMEABEIACMWIQQ5itosDZMreh2Xgnx0ToLZ2FXYlQUCX/8idAUDAAAAAAAKCRB0ToLZ2FXYlfLW AKC9S2XQ50xADJR00RUb6bxT9WFSMgCglSVXdkURhuUruFKfiDFFD0UQ+o8= =BO8I -----END PGP SIGNATURE----- --Nje5SULJhCKmlosCcqso9yGNAgn4vY5Gm--