Re: Found extra tables in nft ruleset

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Using 'nft monitor' solved that: It appears that the extra tables were
added by iptables, which is in Raspbian Buster by default in the package
of the same name:

$ grep -i pretty /etc/os-release
PRETTY_NAME="Raspbian GNU/Linux 10 (buster)"

$ apt-cache policy iptables | head -n 3
iptables:
  Installed: 1.8.2-4
  Candidate: 1.8.2-4

iptables interferes with nft.  Uninstalling it package leaves nftables
alone to create new tables without getting extra, unasked for tables.

$ sudo nft add table ip foobar

$ sudo nft list ruleset
table ip foobar {
}

All set.  Thanks.

/Lars



[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux