{"id":38916,"date":"2019-10-31T22:26:43","date_gmt":"2019-10-31T19:26:43","guid":{"rendered":"https:\/\/prohoster.info\/blog\/v-debian-11-predlagaetsya-po-umolchaniyu-zadejstvovat-nftables-i-firewalld\/"},"modified":"2019-10-31T22:26:43","modified_gmt":"2019-10-31T19:26:43","slug":"v-debian-11-predlagaetsya-po-umolchaniyu-zadejstvovat-nftables-i-firewalld","status":"publish","type":"post","link":"https:\/\/prohoster.info\/de\/blog\/news\/v-debian-11-predlagaetsya-po-umolchaniyu-zadejstvovat-nftables-i-firewalld","title":{"rendered":"In Debian 11 wird standardm\u00e4\u00dfig nftables und firewalld aktiviert.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Arturo Borrero, Debian-Entwickler, der im Coreteam des Netfilter-Projekts mitarbeitet und in Debian Pakete verwaltet, die mit nftables, iptables und netfilter verbunden sind. <noindex><a rel=\"nofollow\" href=\"https:\/\/ral-arturo.org\/2019\/10\/14\/debian-netfilter.html\">Alternativen zu den Begriffen \u201ewhitelist\/blacklist\u201c und \u201emaster\/slave\u201c vor, die f\u00fcr die Verwendung in Spezifikationen bevorzugt werden \u2013 anstelle von \u201emaster\/slave\u201c wird empfohlen, \u201eprimary\/secondary\u201c, \u201eleader\/follower\u201c,<\/a><\/noindex> Um den n\u00e4chsten signifikanten Release von Debian 11 standardm\u00e4\u00dfig auf die Nutzung von nftables umzustellen. Im Falle der Genehmigung des Vorschlags werden die Pakete von iptables zu optionalen Komponenten, die nicht Teil der Grundausstattung sind, herabgestuft.<\/p>\n<p>Der Paketfilter Nftables zeichnet sich durch die Vereinheitlichung der Schnittstellen zur Paketfilterung f\u00fcr IPv4, IPv6, ARP und Netzwerkbr\u00fccken aus. Nftables bietet auf Kernel-Ebene nur eine allgemeine Schnittstelle, die unabh\u00e4ngig vom spezifischen Protokoll ist und grundlegende Funktionen zum Extrahieren von Daten aus Paketen, zur Datenverarbeitung und zum Flussmanagement bereitstellt. Die Logik der Filterung und die spezifischen Protokollverarbeitungen werden in Bytecode im Benutzerspeicher kompiliert und dieser Bytecode wird dann \u00fcber das Netlink-Interface in den Kernel geladen und in einer speziellen virtuellen Maschine ausgef\u00fchrt, die der BPF (Berkeley Packet Filters) \u00e4hnelt. <\/p>\n<p>Standardm\u00e4\u00dfig wird in Debian 11 auch der dynamische Firewall-Dienst firewalld angeboten, der als Schicht \u00fcber nftables fungiert. Firewalld wird als Hintergrundprozess ausgef\u00fchrt, der es erm\u00f6glicht, die Regeln des Paketfilters \u00fcber DBus dynamisch zu \u00e4ndern, ohne dass die Regeln des Paketfilters neu geladen und bestehende Verbindungen unterbrochen werden m\u00fcssen. Um die Firewall zu verwalten, wird das Werkzeug firewall-cmd verwendet, das bei der Erstellung von Regeln nicht von <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/de\/lir\/ipv4\/\"   title=\"IP-Adressen\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"805\">IP-Adressen<\/a>, Netzwerk-Interfaces und Portnummern, sowie von den Dienstnamen (zum Beispiel, um den Zugriff auf SSH zu erm\u00f6glichen, f\u00fchren Sie &#171;firewall-cmd &#8212;add &#8212;service=ssh&#187; aus, um SSH zu schlie\u00dfen &#8212; &#171;firewall-cmd &#8212;remove &#8212;service=ssh&#187;).<\/p>\n<p><noindex><a rel=\"nofollow\" name=\"link\"><\/a><\/noindex><\/p>\n<p>Quelle: <a \ncontent=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=51671\">opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0410\u0440\u0442\u0443\u0440\u043e \u0411\u043e\u0440\u0440\u0435\u0440\u043e (Arturo Borrero), \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a Debian, \u0432\u0445\u043e\u0434\u044f\u0449\u0438\u0439 \u0432 Coreteam \u043f\u0440\u043e\u0435\u043a\u0442\u0430 Netfilter \u0438 \u0441\u043e\u043f\u0440\u043e\u0432\u043e\u0436\u0434\u0430\u044e\u0449\u0438\u0439 \u0432 Debian \u043f\u0430\u043a\u0435\u0442\u044b, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 nftables, iptables \u0438 netfilter, \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0438\u043b \u043f\u0435\u0440\u0435\u0432\u0435\u0441\u0442\u0438 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0439 \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u0432\u044b\u043f\u0443\u0441\u043a \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430 Debian 11 \u043d\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 nftables \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e. \u0412 \u0441\u043b\u0443\u0447\u0430\u0435 \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u044f \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u043f\u0430\u043a\u0435\u0442\u044b \u0441 iptables \u0431\u0443\u0434\u0443\u0442 \u043f\u0435\u0440\u0435\u0432\u0435\u0434\u0435\u043d\u044b \u0432 \u0440\u0430\u0437\u0440\u044f\u0434 \u043d\u0435\u043e\u0431\u044f\u0437\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u043e\u043f\u0446\u0438\u0439, \u043d\u0435 \u0432\u0445\u043e\u0434\u044f\u0449\u0438\u0445 \u0432 \u0431\u0430\u0437\u043e\u0432\u0443\u044e \u043f\u043e\u0441\u0442\u0430\u0432\u043a\u0443. \u041f\u0430\u043a\u0435\u0442\u043d\u044b\u0439 \u0444\u0438\u043b\u044c\u0442\u0440 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-38916","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.1.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0410\u0440\u0442\u0443\u0440\u043e \u0411\u043e\u0440\u0440\u0435\u0440\u043e (Arturo Borrero), \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a Debian, \u0432\u0445\u043e\u0434\u044f\u0449\u0438\u0439 \u0432 Coreteam \u043f\u0440\u043e\u0435\u043a\u0442\u0430 Netfilter \u0438 \u0441\u043e\u043f\u0440\u043e\u0432\u043e\u0436\u0434\u0430\u044e\u0449\u0438\u0439 \u0432 Debian \u043f\u0430\u043a\u0435\u0442\u044b, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 nftables, iptables \u0438 netfilter,\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/de\/blog\/news\/v-debian-11-predlagaetsya-po-umolchaniyu-zadejstvovat-nftables-i-firewalld\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.1.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"de_DE\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0412 Debian 11 \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u0435\u0442\u0441\u044f \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u0442\u044c nftables \u0438 firewalld | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0410\u0440\u0442\u0443\u0440\u043e \u0411\u043e\u0440\u0440\u0435\u0440\u043e (Arturo Borrero), \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a Debian, \u0432\u0445\u043e\u0434\u044f\u0449\u0438\u0439 \u0432 Coreteam \u043f\u0440\u043e\u0435\u043a\u0442\u0430 Netfilter \u0438 \u0441\u043e\u043f\u0440\u043e\u0432\u043e\u0436\u0434\u0430\u044e\u0449\u0438\u0439 \u0432 Debian \u043f\u0430\u043a\u0435\u0442\u044b, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 nftables, iptables \u0438 netfilter,\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/de\/blog\/news\/v-debian-11-predlagaetsya-po-umolchaniyu-zadejstvovat-nftables-i-firewalld\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T19:26:43+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T19:26:43+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47In Debian 11 wird standardm\u00e4\u00dfig die Nutzung von nftables und firewalld vorgeschlagen | ProHoster","description":"Arturo Borrero, Debian-Entwickler, der im Coreteam des Netfilter-Projekts mitarbeitet und in Debian Pakete verwaltet, die mit nftables, iptables und netfilter verbunden sind.","canonical_url":"https:\/\/prohoster.info\/de\/blog\/news\/v-debian-11-predlagaetsya-po-umolchaniyu-zadejstvovat-nftables-i-firewalld","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"de_DE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 Debian 11 \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u0435\u0442\u0441\u044f \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u0442\u044c nftables \u0438 firewalld | ProHoster","og:description":"\u0410\u0440\u0442\u0443\u0440\u043e \u0411\u043e\u0440\u0440\u0435\u0440\u043e (Arturo Borrero), \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a Debian, \u0432\u0445\u043e\u0434\u044f\u0449\u0438\u0439 \u0432 Coreteam \u043f\u0440\u043e\u0435\u043a\u0442\u0430 Netfilter \u0438 \u0441\u043e\u043f\u0440\u043e\u0432\u043e\u0436\u0434\u0430\u044e\u0449\u0438\u0439 \u0432 Debian \u043f\u0430\u043a\u0435\u0442\u044b, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 nftables, iptables \u0438 netfilter,","og:url":"https:\/\/prohoster.info\/de\/blog\/news\/v-debian-11-predlagaetsya-po-umolchaniyu-zadejstvovat-nftables-i-firewalld","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:26:43+00:00","article:modified_time":"2019-10-31T19:26:43+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"38916","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-08 20:44:57","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:00:27","updated":"2026-02-08 20:44:57","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/de\/wp-json\/wp\/v2\/posts\/38916","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/de\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/de\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/de\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/de\/wp-json\/wp\/v2\/comments?post=38916"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/de\/wp-json\/wp\/v2\/posts\/38916\/revisions"}],"predecessor-version":[{"id":157996,"href":"https:\/\/prohoster.info\/de\/wp-json\/wp\/v2\/posts\/38916\/revisions\/157996"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/de\/wp-json\/wp\/v2\/media?parent=38916"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/de\/wp-json\/wp\/v2\/categories?post=38916"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/de\/wp-json\/wp\/v2\/tags?post=38916"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}