Project

General

Profile

Actions
Copy link

Task #3609

closed

Convert iptables/shorewalls rulesets to nftables

Added by Brett Cornwall about 4 years ago. Updated 2 months ago.

Status:
Closed
Priority:
Normal
Assignee:
Brett Cornwall
Category:
-
Target version:
-
Start date:
Due date:
% Done:

0%

Tags:
Salt
URL:

Description

iptables is on its way out and was never loved to begin with. nftables is the default firewalling implementation in future, so convert all existing iptables rules to nftables.

firewalld (and similar front-end abstractions) were briefly discussed but it appears TDF's firewalling use-case is not complex enough to really need this. Salt has an nftables state that we can leverage

It's possible that fail2ban will need adjusting to the switch. Also consider combing through to see if any other systems depend specifically on iptables or shorewall.

Actions
Copy link
 #1

Updated by Ahmed Alaoui 2 months ago

Hi, I noticed this issue has been open for almost 4 years with no activity. I'd like to help move it forward. I have hands-on experience with Linux firewalling and nftables on Debian, and I'm comfortable working with configuration management. Is Brett still working on this, or is it available to pick up?

Actions
Copy link
 #2

Updated by Guilhem Moulin 2 months ago

  • Status changed from New to Closed

This was done years ago (forgot we had a open ticket about it)

Actions
Copy link

Also available in: Atom PDF