{"id":53598,"date":"2019-12-05T00:00:00","date_gmt":"2019-12-04T21:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/vypusk-paketnogo-filtra-nftables-0-9-3"},"modified":"2020-02-18T14:01:31","modified_gmt":"2020-02-18T11:01:31","slug":"vypusk-paketnogo-filtra-nftables-0-9-3","status":"publish","type":"post","link":"https:\/\/prohoster.info\/az\/blog\/news\/vypusk-paketnogo-filtra-nftables-0-9-3","title":{"rendered":"nftables 0.9.3 paket filtrinin burax\u0131l\u0131\u015f\u0131","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><noindex><a rel=\"nofollow\" href=\"https:\/\/marc.info\/?l=linux-netdev&#038;m=157532146517289&#038;w=2\">N\u0259\u015fr edilib<\/a><\/noindex> paket filtrinin burax\u0131l\u0131\u015f\u0131 <noindex><a rel=\"nofollow\" href=\"https:\/\/netfilter.org\/projects\/nftables\/\">nftables 0.9.3<\/a><\/noindex>, inki\u015faf ed\u0259n iptables, ip6table, arptables v\u0259 ebtables yerini tutmaq \u00fc\u00e7\u00fcn IPv4, IPv6, ARP v\u0259 \u015f\u0259b\u0259k\u0259 k\u00f6rp\u00fcl\u0259ri \u00fc\u00e7\u00fcn paket filtrasiya interfeysl\u0259rinin birl\u0259\u015fdirilm\u0259sin\u0259 \u0259saslan\u0131r. nftables paketind\u0259 istifad\u0259\u00e7i m\u0259kan\u0131nda f\u0259aliyy\u0259t g\u00f6st\u0259r\u0259n paket filtr komponentl\u0259ri daxildir, kernel s\u0259viyy\u0259sind\u0259 is\u0259 Linux-un 3.13 burax\u0131l\u0131\u015f\u0131ndan etibar\u0259n nf_tables alt sistemi f\u0259aliyy\u0259t g\u00f6st\u0259rir. nftables 0.9.3 burax\u0131l\u0131\u015f\u0131 \u00fc\u00e7\u00fcn laz\u0131m olan d\u0259yi\u015fiklikl\u0259r g\u0259l\u0259c\u0259k Linux 5.5 kernel qismind\u0259 daxil edilmi\u015fdir.<\/p>\n<p>Kernel s\u0259viyy\u0259sind\u0259 konkret protokoldan as\u0131l\u0131 olmayan \u00fcmumi bir interfeys t\u0259qdim edilir v\u0259 paketl\u0259rd\u0259n m\u0259lumatlar\u0131 \u00e7\u0131xarmaq, m\u0259lumatlarla \u0259m\u0259liyyatlar aparmaq v\u0259 ax\u0131n idar\u0259etm\u0259si \u00fc\u00e7\u00fcn \u0259sas funksiyalar t\u0259min edir. Filtrasiya m\u0259ntiqi v\u0259 protokola spesifik emal\u00e7\u0131lar istifad\u0259\u00e7i m\u0259kan\u0131nda byte koduna t\u0259rtib olunur, daha sonra bu byte kod Netlink interfeysi vasit\u0259sil\u0259 kernel\u0259 y\u00fckl\u0259nir v\u0259 BPF (Berkeley Packet Filters)-\u0259 b\u0259nz\u0259r x\u00fcsusi virtual ma\u015f\u0131nda icra olunur. Bu yana\u015fma kernel s\u0259viyy\u0259sind\u0259 filtrasiya kodunun \u00f6l\u00e7\u00fcs\u00fcn\u00fc \u0259h\u0259miyy\u0259tli d\u0259r\u0259c\u0259d\u0259 azaltma\u011fa imkan verir v\u0259 qayda analiz funksiyalar\u0131n\u0131 v\u0259 protokollarla i\u015fl\u0259m\u0259 m\u0259ntiqini istifad\u0259\u00e7i m\u0259kan\u0131na ke\u00e7irir.<\/p>\n<p>\u018fsas yenilikl\u0259r:<\/p>\n<ul>\n<li class=\"l\"> Vaxt\u0131n uy\u011funlu\u011funu paketl\u0259\u015fdir\u0259n d\u0259st\u0259k. Qaydan\u0131n nec\u0259 i\u015fl\u0259y\u0259c\u0259yini m\u00fc\u0259yy\u0259n etm\u0259k \u00fc\u00e7\u00fcn zaman intervallar\u0131 v\u0259 tarixl\u0259r t\u0259yin ed\u0259 bil\u0259rsiniz, h\u0259m\u00e7inin ayr\u0131-ayr\u0131 h\u0259ft\u0259 g\u00fcnl\u0259ri \u00fc\u00e7\u00fcn tetikl\u0259nm\u0259ni t\u0259nziml\u0259y\u0259 bil\u0259rsiniz. Eyni zamanda, epok zaman\u0131 saniy\u0259l\u0259rl\u0259 ifad\u0259 etm\u0259k \u00fc\u00e7\u00fcn yeni &#171;-T&#187; se\u00e7imi \u0259lav\u0259 edilib.\n<p>     meta time &#092;&#187;2019-12-24 16:00&#092;&#187; &#8212; &#092;&#187;2020-01-02 7:00&#092;&#187;<br \/>\n     meta hour &#092;&#187;17:00&#092;&#187; &#8212; &#092;&#187;19:00&#092;&#187;<br \/>\n     meta day &#092;&#187;Fri&#092;&#187;<\/p>\n<li class=\"l\"> SELinux (secmark) etiketl\u0259rinin b\u0259rpa v\u0259 saxlama d\u0259st\u0259yi.\n<p>     ct secmark set meta secmark<br \/>\n     meta secmark set ct secmark<\/p>\n<li class=\"l\"> Bir ne\u00e7\u0259 qaydan\u0131 backend-d\u0259 m\u00fc\u0259yy\u0259n etm\u0259y\u0259 imkan ver\u0259n synproxy map-lar\u0131n\u0131 d\u0259st\u0259kl\u0259yir.\n<p>    table ip foo {<br \/>\n            synproxy https-synproxy {<br \/>\n                    mss 1460<br \/>\n                    wscale 7<br \/>\n                    timestamp sack-perm<br \/>\n            }<\/p>\n<p>            synproxy other-synproxy {<br \/>\n                    mss 1460<br \/>\n                    wscale 5<br \/>\n            }<\/p>\n<p>            chain pre {<br \/>\n                    type filter hook prerouting priority raw; policy accept;<br \/>\n                    tcp dport 8888 tcp flags syn notrack<br \/>\n            }<\/p>\n<p>            chain bar {<br \/>\n                    type filter hook forward priority filter; policy accept;<br \/>\n                    ct state invalid,untracked synproxy name ip saddr map { 192.168.1.0\/24 : &#171;https-synproxy&#187;, 192.168.2.0\/24 : &#171;other-synproxy&#187; }<br \/>\n            }<br \/>\n     }<\/p>\n<li class=\"l\"> Paket emal\u0131 qaydalar\u0131ndan set-k\u00fcme elementl\u0259rini dinamik olaraq silm\u0259k imkan\u0131.\n<p>     nft add rule \u2026 delete @set5 { ip6 saddr . ip6 daddr }<\/p>\n<li class=\"l\"> VLAN-lar\u0131 identifikator v\u0259 protokol \u00fczr\u0259 meta m\u0259lumatlarda m\u00fc\u0259yy\u0259n edilmi\u015f interfeys\u0259 uy\u011funla\u015fd\u0131rmaq d\u0259st\u0259yi;\n<p>        meta ibrpvid 100<br \/>\n        meta ibrvproto vlan<\/p>\n<li class=\"l\"> \u018flav\u0259 &#171;-t&#187; (&#171;&#8212;terse&#187;) set-toplu elementl\u0259rin qaydalar\u0131n n\u00fcmayi\u015fi zaman\u0131 \u00e7\u0131xar\u0131lmas\u0131 \u00fc\u00e7\u00fcn. &#171;nft -t list ruleset&#187; icra edildikd\u0259, a\u015fa\u011f\u0131dak\u0131 n\u0259tic\u0259 \u0259ld\u0259 edil\u0259c\u0259k:\n<p>    table ip x {<br \/>\n        set y {<br \/>\n                type ipv4_addr<br \/>\n        }<br \/>\n    }<\/p>\n<p>V\u0259 &#171;nft list ruleset&#187;<\/p>\n<p>    table ip x {<br \/>\n        set y {<br \/>\n                type ipv4_addr<br \/>\n                elements = { 192.168.10.2, 192.168.20.1,<br \/>\n                             192.168.4.4, 192.168.2.34 }<br \/>\n        }<br \/>\n    }<\/p>\n<li class=\"l\"> \u015e\u0259b\u0259k\u0259 cihazlar\u0131 z\u0259ncirl\u0259rind\u0259 bir ne\u00e7\u0259 cihaz\u0131n g\u00f6st\u0259rilm\u0259si imkan\u0131 (yaln\u0131z 5.5 kernel il\u0259 i\u015fl\u0259yir) \u00fc\u00e7\u00fcn standart filtrasiya qaydalar\u0131n\u0131 birl\u0259\u015fdirm\u0259k.\n<p>     add table netdev x<br \/>\n     add chain netdev x y { &#092;<br \/>\n        type filter hook ingress devices = { eth0, eth1 } priority 0;<br \/>\n     }<\/p>\n<li class=\"l\"> M\u0259lumat n\u00f6v\u00fc tipl\u0259ri \u00fc\u00e7\u00fcn t\u0259svirl\u0259rin \u0259lav\u0259 edilm\u0259si imkan\u0131.\n<p>    # nft describe ipv4_addr<br \/>\n    datatype ipv4_addr (IPv4 address) (basetype integer), 32 bits<\/p>\n<li class=\"l\"> CLI interfeysinin linenoise kitabxanas\u0131 il\u0259 libreadline \u0259v\u0259zin\u0259 y\u0131\u011f\u0131lmas\u0131 imkan\u0131.\n<p>     .\\\/configure &#8212;with-cli=linenoise<\/p>\n<\/ul>\n<p><noindex><a rel=\"nofollow\" name=\"link\"><\/a><\/noindex><\/p>\n<p>M\u0259nb\u0259: <a \ncontent=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=51980\">opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0432\u044b\u043f\u0443\u0441\u043a \u043f\u0430\u043a\u0435\u0442\u043d\u043e\u0433\u043e \u0444\u0438\u043b\u044c\u0442\u0440\u0430 nftables 0.9.3, \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u044e\u0449\u0435\u0433\u043e\u0441\u044f \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0437\u0430\u043c\u0435\u043d\u044b iptables, ip6table, arptables \u0438 ebtables \u0437\u0430 \u0441\u0447\u0451\u0442 \u0443\u043d\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u043e\u0432 \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u0438 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0434\u043b\u044f IPv4, IPv6, ARP \u0438 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u043c\u043e\u0441\u0442\u043e\u0432. \u0412 \u043f\u0430\u043a\u0435\u0442 nftables \u0432\u0445\u043e\u0434\u044f\u0442 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u044b \u043f\u0430\u043a\u0435\u0442\u043d\u043e\u0433\u043e \u0444\u0438\u043b\u044c\u0442\u0440\u0430, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0435 \u0432 \u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0441\u0442\u0432\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u0432 \u0442\u043e \u0432\u0440\u0435\u043c\u044f \u043a\u0430\u043a \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u044f\u0434\u0440\u0430 \u0440\u0430\u0431\u043e\u0442\u0443 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u0435\u0442 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u0430 nf_tables, \u0432\u0445\u043e\u0434\u044f\u0449\u0430\u044f \u0432 \u0441\u043e\u0441\u0442\u0430\u0432 \u044f\u0434\u0440\u0430 Linux [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-53598","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.0.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0432\u044b\u043f\u0443\u0441\u043a \u043f\u0430\u043a\u0435\u0442\u043d\u043e\u0433\u043e \u0444\u0438\u043b\u044c\u0442\u0440\u0430\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/az\/blog\/news\/vypusk-paketnogo-filtra-nftables-0-9-3\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.0.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"az_AZ\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a \u043f\u0430\u043a\u0435\u0442\u043d\u043e\u0433\u043e \u0444\u0438\u043b\u044c\u0442\u0440\u0430 nftables 0.9.3 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0432\u044b\u043f\u0443\u0441\u043a \u043f\u0430\u043a\u0435\u0442\u043d\u043e\u0433\u043e \u0444\u0438\u043b\u044c\u0442\u0440\u0430\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/az\/blog\/news\/vypusk-paketnogo-filtra-nftables-0-9-3\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-12-04T21:00:00+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-02-18T11:01:31+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47nftables 0.9.3 paket filtrin burax\u0131l\u0131\u015f\u0131 | ProHoster","description":"Filter release published","canonical_url":"https:\/\/prohoster.info\/az\/blog\/news\/vypusk-paketnogo-filtra-nftables-0-9-3","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"az_AZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a \u043f\u0430\u043a\u0435\u0442\u043d\u043e\u0433\u043e \u0444\u0438\u043b\u044c\u0442\u0440\u0430 nftables 0.9.3 | ProHoster","og:description":"\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0432\u044b\u043f\u0443\u0441\u043a \u043f\u0430\u043a\u0435\u0442\u043d\u043e\u0433\u043e \u0444\u0438\u043b\u044c\u0442\u0440\u0430","og:url":"https:\/\/prohoster.info\/az\/blog\/news\/vypusk-paketnogo-filtra-nftables-0-9-3","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-12-04T21:00:00+00:00","article:modified_time":"2020-02-18T11:01:31+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"53598","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-24 08:02:20","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 20:22:49","updated":"2026-01-24 08:02:20","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/posts\/53598","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/comments?post=53598"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/posts\/53598\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/media?parent=53598"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/categories?post=53598"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/tags?post=53598"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}