new to nft

François Patte <[email protected]> Wed, 13 Jan 2021 17:40:20 +0100
Newsgroups gmane.linux.debian.devel.firewall
Organization Université Paris Descartes
Message-ID <[email protected]>
This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--Nje5SULJhCKmlosCcqso9yGNAgn4vY5Gm
Content-Type: multipart/mixed; boundary="UevvUGqidaNbCCXZfVHdukMp7JKAjOAwz";
 protected-headers="v1"
From: =?UTF-8?Q?Fran=c3=a7ois_Patte?= <[email protected]>
To: [email protected]
Message-ID: <[email protected]>
Subject: new to nft

--UevvUGqidaNbCCXZfVHdukMp7JKAjOAwz
Content-Type: multipart/mixed;
 boundary="------------AC40019453B25BB483A3C374"
Content-Language: fr-FR

This is a multi-part message in MIME format.
--------------AC40019453B25BB483A3C374
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: quoted-printable

Bonjour,

I begin to use nftables and wrote thes rules:
	chain input { # handle 1
		type filter hook input priority 0; policy drop;
		ct state established,related accept # handle 4
		ip saddr 192.168.1.0/24 accept # handle 5
		ip6 saddr fe80::/10 accept # handle 6
		ct state invalid drop # handle 7
		iifname "lo" accept # handle 8
		tcp dport 22222 accept # handle 9
		log # handle 10
	}

I expect to block all traffic from anywhere except on the local network=20
(192.168.1.0/24)

Is "fe80::/10" the ipv6 corresponding syntax for ipv4 192.168.1.0/24?

I expect too accept connections from the internet to port 22222

The last line "log" is (for me) supposed to log all dropped packets, am=20
I right?

For this last line, logwatch reports "logged packets on interface".
logwatch with iptables reports "drop packets on the interface"

Are these packets dropped or only logged?

Thank you for your explanations.

Regards.

--=20
Fran=C3=A7ois Patte
UFR de math=C3=A9matiques et informatique
Laboratoire CNRS MAP5, UMR 8145
Universit=C3=A9 Paris Descartes
45, rue des Saints P=C3=A8res
F-75270 Paris Cedex 06
T=C3=A9l. +33 (0)6 7892 5822
http://www.math-info.univ-paris5.fr/~patte
FSF
https://www.fsf.org/blogs/community/presenting-shoetool-happy-holidays-fr=
om-the-fsf

--------------AC40019453B25BB483A3C374
Content-Type: application/pgp-keys;
 name="OpenPGP_0x744E82D9D855D895.asc"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: attachment;
 filename="OpenPGP_0x744E82D9D855D895.asc"

-----BEGIN PGP PUBLIC KEY BLOCK-----

xsDiBEI1fdMRBACpPxrD/B2pHUPHchL+8QAOFZX35wLqvE5mUxUxLU6E0FvwXJ+A9R4FfpHel=
XiC
aeO27hW4g3owes6eWEtZS1f6tXCoUWvLttLCodQcC/JQtnW72YujgvygjQKMKBWNRk+9YNGZ0=
an+
+BOarOSZDt+7xqvJXgSmJiwvUkO1T4362wCg2ER+jQO1M56UdFmhHaS/77jMEfUD/i26BuZu+=
RLl
Q5bpiZIUOBsvegcXxL6sXi/uQy18bfhiKh4+5DDhfoQ+qOvmCSt227U+c8Qk+3KD2lDMrOqXf=
cX2
F+FVx1OOGr5tfIfgS1VXh4ED8Q2QxgwZIEqWmHpHTLOJq1Ant3HYhV7/52zOjB/uTXtg/tnhp=
B19
H/o1EhxoBACpOLfMslUxJ0JafuWzuVI/kAxtZV2sviRMn4K2hi2fxT1B0PbYgf5tbdj/4HBko=
7ZK
oFbgZSyb1bwmx09NjKETp+cpMHWrJnzVaw34dVBXLX0cYGrA/zCyXe3h+6YRIMdbQiM6JrWs0=
IL2
iIKsE+Jy4K3TzKDoBIVeEWJ4Lu/1XM00RnJhbmNvaXMgUGF0dGUgPGZyYW5jb2lzLnBhdHRlQ=
G1p
LnBhcmlzZGVzY2FydGVzLmZyPsJjBBMRAgAjAhsDBgsJCAcDAgQVAggDBBYCAwECHgECF4ACG=
QEF
Aks2AOMACgkQdE6C2dhV2JVauQCfTNGay56QxPlBwZ6tAXEbwMS1pjYAnj8XMw9THvaJiTDY9=
AYd
hUOxHwSCwmAEExECACAFAkkV2zYCGwMGCwkIBwMCBBUCCAMEFgIDAQIeAQIXgAAKCRB0ToLZ2=
FXY
lUxJAJ9Lii78Tun2FiClG7QrRXw0MbbTKwCfbcl66LTmbV06KTL6lnY4CyAGtqnNRUZyYW5jb=
2lz
IFBhdHRlIChVbml2ZXJzaXRlKSA8ZnJhbmNvaXMucGF0dGVAbWF0aC1pbmZvLnVuaXYtcGFya=
XM1
LmZyPsJeBBMRAgAeAhsDBgsJCAcDAgMVAgMDFgIBAh4BAheABQJLNgDoAAoJEHROgtnYVdiV0=
4AA
nihp7tPzZ1fISw1lj/X1qlEDhfh+AKCwtfIChSMuz6lKFy+YnfA4bn2WmMJeBBMRAgAeAhsDB=
gsJ
CAcDAgMVAgMDFgIBAh4BAheABQJJFdj3AAoJEHROgtnYVdiVEzUAn0YktovlSpEGRS478jOCH=
g+u
NYdTAKDHz8K3QIbK28YHgSPuKp0WmWfw4cJeBBMRAgAeAhsDBgsJCAcDAgMVAgMDFgIBAh4BA=
heA
BQJJFdaPAAoJEHROgtnYVdiV0KcAoNdcgIaHxa2MYp2iZ60SVGoU6j56AKCGOTYiRwj+DIoGZ=
TSb
Q8ZkppD9e8JkBBMRAgAkBQJCNX3TAhsDBQkJZgGABgsJCAcDAgMVAgMDFgIBAh4BAheAAAoJE=
HRO
gtnYVdiV14wAnjYejaMScSmzaMIbC8QF0L0VakAQAJ43osoSYb6t9tMy9ppK8aw3DxqHQtHLI=
Mse
ARAAAQEAAAAAAAAAAAAAAAD/2P/gABBKRklGAAEBAQBIAEgAAP/bAEMAFg8RExEOFhMSExkXF=
hoh
NyQhHh4hRDAzKDdQRlRTT0ZNTFhjf2xYXnhfTE1ulnB4g4eOkI5Wapynm4qmf4uOif/bAEMBF=
xkZ
IR0hQSQkQYlbTVuJiYmJiYmJiYmJiYmJiYmJiYmJiYmJiYmJiYmJiYmJiYmJiYmJiYmJiYmJi=
YmJ
iYmJif/AABEIAJ8A8AMBIgACEQEDEQH/xAAaAAACAwEBAAAAAAAAAAAAAAABAgADBAUG/8QAN=
BAA
AQMDAwIFBAECBgMAAAAAAQACEQMhMQQSQVFhBRMicYEyQpGhsSPRFSRiwfDxM1KS/8QAFwEBA=
QEB
AAAAAAAAAAAAAAAAAAECA//EABsRAQEBAQADAQAAAAAAAAAAAAABEQISITFR/9oADAMBAAIRA=
xEA
PwDySiigygiiJEFQZQBSFcwyFHWbHRBUopwogCiKCCIgDlBRAxgIFBRAQmS3yhJQOgcISpNkA=
UUU
QRRRRBFFFEEUURAQBThGO/6RiT2CBYURQQHajsKZMgTYUC0g/tWqFu5vdAoYdoIN0Hl0Q4fKd=
p/p
4uFWXOOSUAygjCVAZUygogKCiICCAElaaWlLhO6DwrdHQa5zS5sj+V2KdFoaPQ0FTVkt+OcdM=
59N
pLJdHqt+1z61EsuAvRFtQTDrHIysr9GXy1o94GE0vNjgqLZrtKaL9wu08hZFUBRFRAFFFEEUU=
UQQ
IiQLKDr0V2mZurN7XQIKdV2GuTGjUDfoK1F7osB/w2QNQwTA5/mAgxPBbYghKtxe0yHC189ln=
rsa
wjaIJ4QJKIISKILZHVEOVSZo3GEFggE3yqqgh89VZtAEnhENa4SIIQUoBaCxgiYugaI4JCGqY=
CCa
4shCAIqQrKNM1X7BMkGAOSg6/hwL2t3CzRAXUp0w85suV4dUcykwFoAJhb2aprHbXNA6LN+uv=
NyL
X09roV9OkwU90w6LrK+s11ydvugazowQEid+4o11JtQHec2suBqKPlVC2ZHBXoDUa6pfBsVxf=
ECD
qnBt2jB6rTkyKJkIRQURhSEAURhRAOIC1adpZTe+OwVdGmDTqVDhv7V49OlZOXmUCF8cG2PgW=
U3N
EXx/sP7o2SkBZ1rxS1gT0B/kqnUO3VT2srhAdJwLlZ3iL9VYzgKIqKiKyiJJSAK2iLlAtI+og=
3B4
Rp2Bb0KXDvlP957oI69Rna6lNxdVcZthQ2fPRqFEQR7IhXj1u90ITuHrd7lCEUsIj0mQYjlGF=
C2R
HVB3dIBTa3cQCBK07WEAbPTwVj0+9+novAwII6rczcfqNuiy6S+iii1plrRuOTlSs9tIXEwJi=
Mq9
rQLC6weJPiGN+oi/smM3oPOpuYS0AkjJ4XCqONR5cVoqgmW3A5WcsLVpksKQjCiAIIqIAoipC=
C8y
3RNaM1HSneQdobhohXOFJop032Ib0wl8hr703td7FCKUCrHUKg4n4VZa4cLONaR0kbRlxAQ1Q=
a2r
saMBW0WHzw52GglZnuL3uceTK0zUUQlEFAVbRyVTdEEjBKBjk+5TfcPZJfqiCZHKIc/V8KMsQ=
oLw
UW8e8IFIlzvcqQmH1O9yjhRSojEqQSbpgMDug26TXNoMbSqsIaPvF/ytx1dOsIova4cmcLkC6=
lB7
qVRzgAXcHgIOxU1Jo0wG/UVz3EudJMkpd9QmXQ4nqg50ulESqxpbAysxBha7Ae6rIlvygybVC=
FcG
AkjtZVwikhCE8XU+FQnwnoM31mN6lQtVumEOe/8A9GlAtR+6rWfPYLNF1Ze6EIC2tWZio78yr=
aWp
qucGu2kdSFQQUWWDupsEGqrU/wAqXQGl1rLCtOq9OykPtF/dZ0EARhEA5iyMdEQvwjCYBEggx=
EIg
AKBEBCWzkoCASmDSOVdpqjaNZtQtDmjIPIXXo6Hw/W0y6hUhx4DsfCjUmuFYWhHuLroazwjU6=
cF4
AqMF5GfwudMCwlAZ5RpmSSqnPAz+FdSE0wQMoHm8Jg05CWPUrRYXRBwO6DWzc44UJTcBBJ23z=
7KH
q24KO7pcpQ6HFpETdAsQ+RzKbU06R09CtTs50tqDuOflL9x9lUJiQUCGMIFWGDEygBeEUhHRO=
1wb
Re37nFCBPKkdJjugrP4UTlspYQLCsoMDqo6C5SQnY4MY8fc4QEFdV297ndSqynISkKhg0nAnl=
ECb
BadIxjjuqNJGIBytVJ1OlX2+W1sWI5Q8XODXtw0/hMylVqmGs+Su4AxwkAKuq+nRG4wFNPFmp=
+GB
1M+Y47iM9Fu8O0raVJrXUmPgmXAAz+Viqa2q4HYNo6q7w7WjzDQfua+JBFwUqyx1jp9GRfTNv=
/oT
UdHpWO3UqDGnq1sJqNZxb/5GK5tR0Sdp9llpTVbtJEnsCV53xfQFn9egCAT6mgftehe6TygWN=
eNp
EgpqWPGt0rjeoY7LQBtaAOi72o8JpVATTJYf0uVqNJW05PmN9PBC1us2MxMEosMgXSup7rgwU=
u19
O49QRF56JzMWWdtWbwrQ8PNnfCCxohCoAQDNwZQDS27T8FKTcm0BAr5cSBjkotAsMAJRAvf5R=
ZLi
Y6wgZwthKROYThpmEDbhVCEYICUi2FaQJthAtPZFVc8f3UKfb0Q2/wDSiqoQIVkTnPulcECQl=
IVk
dCkPKC11RxgUhttE9U2movq1ry0geskqqT8q1lSo1rod9WTCpOv1s1Gr8seXRAnE8BZS4vdL3=
bj/
AAkETCsIDRBBSM26eWRMX7Ksgkh7Dte27SOEAL2EJ2tk5VYaqPj1Sh6NTpw48uHK1s8c0lQZL=
CeC
Fy302hkyD2WPVACrta0AgXgKY6TvXo/8S0ov5zfytOn1dGrdtRpno5eNg9FAXMMglp6iymNa9=
2HA
4Kz+JN8zRvA4grzml8WrUoFT1jryuvS8Rpaii5ocLtII5UxXMdSvIKrJc0XC0EhK7aVWGUtEk=
3HZ
MAALfT2KclpaAALqAAW4QKDeCARwU5s0i0eyQdOyhPpgZKCNG+oGjBMK/a2SAIuqqQ2vbHBWi=
Tti
3uqE+kY9knwnE9PiFCQRbI5RCfF1PzKJMi5QFjygBH5CBuZEyiTF+UDByLwiq3C95UIBATECI=
I/C
TGDKKU8ykPZWFIR+ECsO7CsaDKzsdtM8K8VOghGasuJECIUF/wAJC4nlM2ScqsntbhNT+sEiR=
mEN
s8FWUwAQCbTcoyZ+xxBDYi5usVJjq9d7gteseGaYuaeYCr0TdunwJccnhRvmLw0BoBmwyh5c2=
MOn
hO4YAFuFo0tIF++LDCNMVXQtax1TZ6hwP5WIsAdLSQeoXpXASAs2p8NZWG6mNj+vBQc7coHGY=
lUu
3NcRyCoCRcmAFBZtjYO6LrOAGUvnUiBLxa8GyAqtcS6RbugJvvi3RDcCVWagNgdxi8JmAgS7K=
C6l
9c9AtABIJVNFsDfxNp5VsEyQYtwqBiDie6DpxOB1TgbhZB7YaZIBH7QVu4IA9lBJEm3ZM4OJO=
0fC
G0xdCRWR6ri3ZKZGOVbHSxSkQfVPwgQ9SkebC09FZYjHKV4h/ZQIcTkJCAncYgAyECLSqMiem=
77S
q0QitAcP+WRE9vwlpkuFoEZTWOSSjFWB05KuaA4gBUspngBXFxZSLjc4CrLNq3+bWbTbZoWyN=
gDY
mOmFXpPDa1R5fVhoJveSuuyg1rfQB88qNxipsNV1rDEhdBgFMBo6KNog3j8K1tNoFs9UVWWlx=
DgI
jKdu4ZKdojKePwormN8Ja5xNSu8yZhoAV7PC9G0Xp7j1cSStcAWP/SMx7IMR8M0l4Yf/AKKx6=
jwl
pk0z8P8A7rskBIUHmqmi1tIQKZLf9EFWabSVn0z5zHNJc0NmxjldyoYNvdU1HwJ5F0GfVNb5o=
axg
DKQ2t7JGtiSL8IsBeC4+90R9Vh6Y68qslFwbhLF5ymEB2yxd1/2QG4CQbIoQdstx0UeLiOBdE=
n1x
t56pXS1xHJUUNoFwcftKGgTBtMXKsaIaJAg5SOAAiMoEMX9VvZJaSHXE8JjJEm4SuEiQfdBW5=
mY4
P6VZBHXsroJbFuqrJxKo/9nCYAQTEQIAIAIbAwYLCQgHAwIEFQIIAwQWAgMBAh4BAheABQJLN=
gDo
AAoJEHROgtnYVdiVbbwAmwaRMju2SQsNdZbeHNiLx5Z0eXyGAJ9HxnDns5ap13eTam5Rzxhn/=
Zfo
j87DTQRCNX6uEBAA7uE6LpV9gHCbVZSxUf2TufXim1AGuAtlTzJJvVebfqlJhCRuS82qLVikK=
+Wc
o69F72F2Tjb0gBuAsniKAex7Ui8+3HHkQtGFdNcydR2SyqiSUk6ExG3z3ghhD5vkW3KBB8oG+=
aVo
gdNaN+10sVR/H1LVL+vWycF0Amjn0NVhptZPbhjQ4CeYSj1g6++lFx2OXZumfQuj4cs1+KvnQ=
u2j
YlZKYc5IjudL5lYlryFaTk2B5XRxDIhWBVDPY6KW3OJyEuY/RTtoGopWk4u1x5pwsLZAMn+J+=
rO7
A5uHhdY42FMKAemfbdvGBipdXdMnwC+KtOsveIbuivALDSaqV4+x+QfSyK0D3MQeQ/+uekC9j=
WdA
/Rd10p6p9RdPawILDNIVd4vPMuX2i/l6Eojmow14gjkeWLf9zkEBcb4NdD+knelYdDRgtDQHe=
qTS
okDzCn8SUSrpJUFTapPE9+6U5K+gNceGeJcWyQWLBSXXZVwK1xCnYSA6noV2N3lEFVVTK7R4h=
ijz
zNrUrNbaKcG0F0ZZBsgK3NSMAAXUWfknU9ZnWmg2EO66/9FIlwo2MQsHdFS/GuIIXiLs9Qzjy=
Go2
F5zgy232pu4eY53RBIPFumfGjkr6j9EUG2tvJofx5V3fAvjxD+X7bRJuqvBp7wbUkBrIi83f+=
q+Q
mJmuMIPIyTLby4cABAsQAKz8R1M1GIDoNbvEtL41f7J6ty1ZLICVO6I40jZdiBe92i0ImHZDD=
v5H
w7NU7gFA9oZ5I+o4h+9HPr7Ah1A1jLJWhZDqcO/F5qyHFnk4IruQorIeJMxJEAA59N/iyk+Hp=
9mP
zK82rD6sSj1sET0uwhC5s2qVuEOrARCFW/JMpxYQRh9V7cWLaeZGvPLXVLlB2Yky2G5bJhqES=
iX4
mYoAp7Vn+ByO5XnDqeutMhOSfGWlGUN0BA26robjhiZh5BVmVBHfJQrxrjn00HSMx87cziBMJ=
j+p
B4Q404JFepfjTZBA3TdUPf9RwWpyuS/Uqvcav3jPCyK4CVtiYS6HpBMbOR1Qkw3AwV9F+WJR4=
ewB
7aBrrsFhQ1nJqLbftSNH3GQihWh7VdMzFFAKUZybZ+Z5fXe03fUtDRrXJZhg0tBv84lIc+n3c=
AKL
tJdT8YegDo68tsBELHeCNaYYr2FU4t37/d0A/x8l08SxaRn8bRJirOjaiQCalWlD5TNYcUoAm=
NN4
Qu4FYW7qG7D8520Wnq8EbJ2rxWe/SsmhF/qlUW/SdH3pRIbbyOS8Q4CTwprU+XY6uk9Shm3GE=
6lH
LoFE73z9mRLyLjArunulgBEDYgj3NOrWCwpfwqO15bXBT1+Ch1ohRI2fdNszVrIbd+C6eNyv3=
c2r
GmzVEEMYS3qOzMt3XFeTwkkEGBECAAkCGwwFAks1/6MACgkQdE6C2dhV2JVWMwCg1YHGDVx8/=
YJg
yLsQWpzfwvFiFbIAn1WGwX5/6xK/eGEsEBALsZ2UULnB
=3DIlZm
-----END PGP PUBLIC KEY BLOCK-----

--------------AC40019453B25BB483A3C374--

--UevvUGqidaNbCCXZfVHdukMp7JKAjOAwz--

--Nje5SULJhCKmlosCcqso9yGNAgn4vY5Gm
Content-Type: application/pgp-signature; name="OpenPGP_signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="OpenPGP_signature"

-----BEGIN PGP SIGNATURE-----

wmMEABEIACMWIQQ5itosDZMreh2Xgnx0ToLZ2FXYlQUCX/8idAUDAAAAAAAKCRB0ToLZ2FXYlfLW
AKC9S2XQ50xADJR00RUb6bxT9WFSMgCglSVXdkURhuUruFKfiDFFD0UQ+o8=
=BO8I
-----END PGP SIGNATURE-----

--Nje5SULJhCKmlosCcqso9yGNAgn4vY5Gm--