/usr/share/doc/nftables/examples/
/usr/share/doc/nftables/examples
NameSizeModeActions
sysvinit/-0755rm
all-in-one.nft10160644editdlrm
arp-filter.nft1290644editdlrm
bridge-filter.nft1970644editdlrm
ct_helpers.nft12630755editdlrm
inet-filter.nft1870644editdlrm
inet-nat.nft2510644editdlrm
ipv4-filter.nft1820644editdlrm
ipv4-mangle.nft740644editdlrm
ipv4-nat.nft2460644editdlrm
ipv4-raw.nft1370644editdlrm
ipv6-filter.nft1860644editdlrm
ipv6-mangle.nft780644editdlrm
ipv6-nat.nft2530644editdlrm
ipv6-raw.nft1410644editdlrm
load_balancing.nft18580755editdlrm
nat.nft11650755editdlrm
netdev-ingress.nft1280644editdlrm
overview.nft10770755editdlrm
pf.os288840644editdlrm
README4750644editdlrm
secmark.nft24040755editdlrm
sets_and_maps.nft12780755editdlrm
workstation.nft8170755editdlrm
Edit: /usr/share/doc/nftables/examples/all-in-one.nft (1016B)
# Here is an example of different families, hooks and priorities in the # nftables framework, all mixed together. # # more examples are located in files/examples in nftables source. # For up-to-date information please visit https://wiki.nftables.org # # This script is meant to be loaded with `nft -f ` # clear all prior state flush ruleset # native dual stack IPv4 & IPv6 family include "./inet-filter.nft" include "./inet-nat.nft" # netdev family at ingress hook. Attached to a given NIC include "./netdev-ingress.nft" # IPv4 family, typical iptables tables/chains layout include "./ipv4-filter.nft" include "./ipv4-mangle.nft" include "./ipv4-nat.nft" include "./ipv4-raw.nft" # IPv6 family, typical ip6tables tables/chains layout include "./ipv6-filter.nft" include "./ipv6-mangle.nft" include "./ipv6-nat.nft" include "./ipv6-raw.nft" # ARP family, typical arptables tables/chain layout include "./arp-filter.nft" # bridge family, typical ebtables tables/chain layout include "./bridge-filter.nft"