CentO 8 and nftables default policy

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]



Hi list,

I'm studying nftables. I'm using CentOS 8.1 (Gnome) and I disabled firewalld. I noticed that a default policy is created with tables and chains probably for firewalld.

So I created a .nft script where I stored my rules with a flush for previous ruleset, then saved on /etc/sysconfig/nftables.conf and the enabled nftables service.

Running the script with nft -f script.nft all work as expected but when rebooting, running nft list ruleset I find my rules and the default policy (chains and tables) that I would not have in my configuration.

My nftables.conf contains only my ruleset.

For example, running nft list tables I found several default tables like:

table ip filter
table ip6 filter
table bridge filter
table ip nat
table ip mangle

So probably there is something that is applying its policy but I ignore what is.

Can someone point me in the right direction?

Thank you in advance.

_______________________________________________
CentOS mailing list
CentOS@xxxxxxxxxx
https://lists.centos.org/mailman/listinfo/centos



[Index of Archives]     [CentOS]     [CentOS Announce]     [CentOS Development]     [CentOS ARM Devel]     [CentOS Docs]     [CentOS Virtualization]     [Carrier Grade Linux]     [Linux Media]     [Asterisk]     [DCCP]     [Netdev]     [Xorg]     [Linux USB]


  Powered by Linux