{"id":103407,"date":"2022-02-22T03:36:42","date_gmt":"2022-02-22T01:36:42","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/vypusk-paketnogo-filtra-nftables-1-0-2"},"modified":"2022-02-22T03:36:42","modified_gmt":"2022-02-22T01:36:42","slug":"vypusk-paketnogo-filtra-nftables-1-0-2","status":"publish","type":"post","link":"https:\/\/prohoster.info\/hu\/blog\/news\/vypusk-paketnogo-filtra-nftables-1-0-2","title":{"rendered":"Megjelent a nftables 1.0.2 csomagsz\u0171r\u0151.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Megjelent az nftables 1.0.2 verzi\u00f3, amely egys\u00e9ges\u00edti a csomagsz\u0171r\u00e9si interf\u00e9szeket IPv4, IPv6, ARP \u00e9s h\u00e1l\u00f3zati hidak sz\u00e1m\u00e1ra (c\u00e9lja az iptables, ip6tables, arptables \u00e9s ebtables helyettes\u00edt\u00e9se). Az nftables 1.0.2 m\u0171k\u00f6d\u00e9s\u00e9hez sz\u00fcks\u00e9ges m\u00f3dos\u00edt\u00e1sok a Linux 5.17-rc kernelbe ker\u00fcltek.      <\/p>\n<p>Az nftables csomagba tartoznak a felhaszn\u00e1l\u00f3i t\u00e9rben m\u0171k\u00f6d\u0151 csomagsz\u0171r\u0151 komponensek, m\u00edg a kernel szintj\u00e9n az nf_tables alrendszer l\u00e1tja el a feladatot, amely a Linux kernel 3.13-as verzi\u00f3j\u00e1t\u00f3l kezdve \u00e9rhet\u0151 el. A kernel szintj\u00e9n csak egy \u00e1ltal\u00e1nos interf\u00e9sz \u00e1ll rendelkez\u00e9sre, amely f\u00fcggetlen a konkr\u00e9t protokollt\u00f3l, \u00e9s alapvet\u0151 funkci\u00f3kat biztos\u00edt a csomagokb\u00f3l sz\u00e1rmaz\u00f3 adatok kinyer\u00e9s\u00e9re, az adatokkal v\u00e9gzett m\u0171veletekre \u00e9s az adatfolyam kezel\u00e9s\u00e9re.    <\/p>\n<p>K\u00f6zvetlen\u00fcl a sz\u0171r\u00e9si szab\u00e1lyok \u00e9s a protokollspecifikus kezel\u0151k felhaszn\u00e1l\u00f3i t\u00e9rben b\u00e1jt k\u00f3dba vannak ford\u00edtva, majd ezt a b\u00e1jt k\u00f3dot a Netlink interf\u00e9sz seg\u00edts\u00e9g\u00e9vel bet\u00f6ltik a kernelbe, ahol speci\u00e1lis k\u00f6rnyezetben v\u00e9grehajt\u00e1sra ker\u00fcl. <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/hu\/vps\/abuzoustojchivye-vps\/\"   title=\"virtu\u00e1lis g\u00e9pben\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"4319\">virtu\u00e1lis g\u00e9pben<\/a>, amely a BPF (Berkeley Packet Filters) elj\u00e1r\u00e1sra eml\u00e9keztet. Ez a megk\u00f6zel\u00edt\u00e9s jelent\u0151sen cs\u00f6kkenti a kernel szinten m\u0171k\u00f6d\u0151 sz\u0171r\u00e9si k\u00f3d m\u00e9ret\u00e9t, mik\u00f6zben az \u00f6sszes szab\u00e1lyok parszol\u00e1s\u00e1val \u00e9s a protokollokkal kapcsolatos logik\u00e1val kapcsolatos funkci\u00f3t a felhaszn\u00e1l\u00f3i t\u00e9rbe helyezi.    <\/p>\n<p>F\u0151bb \u00faj\u00edt\u00e1sok:  <\/p>\n<ul>\n<li class=\"l\"> Meg\u00e9rkezett az \u00faj optimaliz\u00e1l\u00e1si szab\u00e1ly \u00fczemm\u00f3d, amelyet az \u00faj &#171;-o&#187; (&#171;&#8212;optimize&#187;) opci\u00f3val lehet aktiv\u00e1lni. Ez az opci\u00f3 kombin\u00e1lhat\u00f3 a &#171;&#8212;check&#187; opci\u00f3val, amely lehet\u0151v\u00e9 teszi a f\u00e1jl szab\u00e1lyainak m\u00f3dos\u00edt\u00e1sainak ellen\u0151rz\u00e9s\u00e9t \u00e9s optimaliz\u00e1l\u00e1s\u00e1t an\u00e9lk\u00fcl, hogy t\u00e9nylegesen bet\u00f6lten\u00e9nk azt. Az optimaliz\u00e1l\u00e1s sor\u00e1n hasonl\u00f3 szab\u00e1lyok egyes\u00edthet\u0151k, p\u00e9ld\u00e1ul a k\u00f6vetkez\u0151 szab\u00e1lyok:          meta iifname eth1 ip saddr 1.1.1.1 ip daddr 2.2.2.3 accept        meta iifname eth1 ip saddr 1.1.1.2 ip daddr 2.2.2.5 accept        ip saddr 1.1.1.1 ip daddr 2.2.2.2 accept        ip saddr 2.2.2.2 ip daddr 3.3.3.3 drop\n<p>egyes\u00edtve lesznek           meta iifname . ip saddr . ip daddr { eth1 . 1.1.1.1 . 2.2.2.3, eth1 .   1.1.1.2 . 2.2.2.5 } accept        ip saddr . ip daddr vmap { 1.1.1.1 . 2.2.2.2 : accept, 2.2.2.2 . 3.3.3.3   : drop }    <\/p>\n<p>Haszn\u00e1lati p\u00e9lda:       # nft -c -o -f ruleset.test     Egyes\u00edt\u00e9s:       ruleset.nft:16:3-37:  ip daddr 192.168.0.1 counter accept       ruleset.nft:17:3-37:  ip daddr 192.168.0.2 counter accept       ruleset.nft:18:3-37:  ip daddr 192.168.0.3 counter accept     egyes\u00edtve:       ip daddr { 192.168.0.1, 192.168.0.2, 192.168.0.3 } counter packets 0 bytes 0 accept      <\/p>\n<li class=\"l\"> A set-list\u00e1kban megval\u00f3s\u00edtott\u00e1k az ip- \u00e9s tcp-opci\u00f3k, valamint sctp chunk-ok megad\u00e1s\u00e1nak lehet\u0151s\u00e9g\u00e9t:            set s5 {                 typeof ip option ra value                 elements = { 1, 1024 }          }            set s7 {                 typeof sctp chunk init num-inbound-streams                 elements = { 1, 4 }          }            chain c5 {                 ip option ra value @s5 accept          }            chain c7 {                 sctp chunk init num-inbound-streams @s7 accept          }\n<li class=\"l\"> Hozz\u00e1ad\u00f3dott a TCP-opci\u00f3k, mint a fastopen, md5sig \u00e9s mptcp t\u00e1mogat\u00e1sa.\n<li class=\"l\"> Hozz\u00e1ad\u00f3dott az mp-tcp alt\u00edpusok egy\u00fcttm\u0171k\u00f6d\u00e9s\u00e9nek t\u00e1mogat\u00e1sa:            tcp option mptcp subtype 1\n<li class=\"l\"> Jav\u00edtott\u00e1k a kernel oldal\u00e1n m\u0171k\u00f6d\u0151 sz\u0171r\u0151 k\u00f3dj\u00e1t.\n<li class=\"l\"> A flowtable sz\u00e1m\u00e1ra teljes k\u00f6r\u0171 JSON-form\u00e1tum t\u00e1mogat\u00e1s lett bevezetve.\n<li class=\"l\"> Lehet\u0151s\u00e9get biztos\u00edtunk a &#171;reject&#187; m\u0171velet haszn\u00e1lat\u00e1ra az Ethernet-keretek p\u00e1rba \u00e1ll\u00edt\u00e1sakor.            ether saddr aa:bb:cc:dd:ee:ff ip daddr 192.168.0.1 reject      <\/ul>\n<p>Forr\u00e1s: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=56739\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0432\u044b\u043f\u0443\u0441\u043a \u043f\u0430\u043a\u0435\u0442\u043d\u043e\u0433\u043e \u0444\u0438\u043b\u044c\u0442\u0440\u0430 nftables 1.0.2, \u0443\u043d\u0438\u0444\u0438\u0446\u0438\u0440\u0443\u044e\u0449\u0435\u0433\u043e \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u044b \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u0438 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0434\u043b\u044f IPv4, IPv6, ARP \u0438 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u043c\u043e\u0441\u0442\u043e\u0432 (\u043d\u0430\u0446\u0435\u043b\u0435\u043d \u043d\u0430 \u0437\u0430\u043c\u0435\u043d\u0443 iptables, ip6table, arptables \u0438 ebtables). \u041d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u044b\u0435 \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u0432\u044b\u043f\u0443\u0441\u043a\u0430 nftables 1.0.2 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u044b \u0432 \u0441\u043e\u0441\u0442\u0430\u0432 \u044f\u0434\u0440\u0430 Linux 5.17-rc. \u0412 \u043f\u0430\u043a\u0435\u0442 nftables \u0432\u0445\u043e\u0434\u044f\u0442 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u044b \u043f\u0430\u043a\u0435\u0442\u043d\u043e\u0433\u043e \u0444\u0438\u043b\u044c\u0442\u0440\u0430, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0435 \u0432 \u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0441\u0442\u0432\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u0432 \u0442\u043e \u0432\u0440\u0435\u043c\u044f \u043a\u0430\u043a \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-103407","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0432\u044b\u043f\u0443\u0441\u043a \u043f\u0430\u043a\u0435\u0442\u043d\u043e\u0433\u043e \u0444\u0438\u043b\u044c\u0442\u0440\u0430 nftables 1.0.2, \u0443\u043d\u0438\u0444\u0438\u0446\u0438\u0440\u0443\u044e\u0449\u0435\u0433\u043e \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u044b \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u0438 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0434\u043b\u044f IPv4, IPv6, ARP \u0438 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u043c\u043e\u0441\u0442\u043e\u0432 (\u043d\u0430\u0446\u0435\u043b\u0435\u043d \u043d\u0430 \u0437\u0430\u043c\u0435\u043d\u0443 iptables, ip6table, arptables \u0438 ebtables).\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/hu\/blog\/news\/vypusk-paketnogo-filtra-nftables-1-0-2\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"hu_HU\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a \u043f\u0430\u043a\u0435\u0442\u043d\u043e\u0433\u043e \u0444\u0438\u043b\u044c\u0442\u0440\u0430 nftables 1.0.2 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0432\u044b\u043f\u0443\u0441\u043a \u043f\u0430\u043a\u0435\u0442\u043d\u043e\u0433\u043e \u0444\u0438\u043b\u044c\u0442\u0440\u0430 nftables 1.0.2, \u0443\u043d\u0438\u0444\u0438\u0446\u0438\u0440\u0443\u044e\u0449\u0435\u0433\u043e \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u044b \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u0438 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0434\u043b\u044f IPv4, IPv6, ARP \u0438 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u043c\u043e\u0441\u0442\u043e\u0432 (\u043d\u0430\u0446\u0435\u043b\u0435\u043d \u043d\u0430 \u0437\u0430\u043c\u0435\u043d\u0443 iptables, ip6table, arptables \u0438 ebtables).\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/hu\/blog\/news\/vypusk-paketnogo-filtra-nftables-1-0-2\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2022-02-22T01:36:42+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2022-02-22T01:36:42+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Az nftables 1.0.2 verzi\u00f3 megjelen\u00e9se | ProHoster","description":"Megjelent az nftables 1.0.2 verzi\u00f3, amely egys\u00e9ges\u00edti a csomagsz\u0171r\u00e9si interf\u00e9szeket IPv4, IPv6, ARP \u00e9s h\u00e1l\u00f3zati hidak sz\u00e1m\u00e1ra (c\u00e9lja az iptables, ip6tables, arptables \u00e9s ebtables helyettes\u00edt\u00e9se).","canonical_url":"https:\/\/prohoster.info\/hu\/blog\/news\/vypusk-paketnogo-filtra-nftables-1-0-2","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"hu_HU","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a \u043f\u0430\u043a\u0435\u0442\u043d\u043e\u0433\u043e \u0444\u0438\u043b\u044c\u0442\u0440\u0430 nftables 1.0.2 | ProHoster","og:description":"\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0432\u044b\u043f\u0443\u0441\u043a \u043f\u0430\u043a\u0435\u0442\u043d\u043e\u0433\u043e \u0444\u0438\u043b\u044c\u0442\u0440\u0430 nftables 1.0.2, \u0443\u043d\u0438\u0444\u0438\u0446\u0438\u0440\u0443\u044e\u0449\u0435\u0433\u043e \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u044b \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u0438 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0434\u043b\u044f IPv4, IPv6, ARP \u0438 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u043c\u043e\u0441\u0442\u043e\u0432 (\u043d\u0430\u0446\u0435\u043b\u0435\u043d \u043d\u0430 \u0437\u0430\u043c\u0435\u043d\u0443 iptables, ip6table, arptables \u0438 ebtables).","og:url":"https:\/\/prohoster.info\/hu\/blog\/news\/vypusk-paketnogo-filtra-nftables-1-0-2","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-02-22T01:36:42+00:00","article:modified_time":"2022-02-22T01:36:42+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"103407","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2022-02-22 01:37:39","updated":"2022-09-28 07:06:54","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/103407","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/comments?post=103407"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/103407\/revisions"}],"predecessor-version":[{"id":164194,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/103407\/revisions\/164194"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/media?parent=103407"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/categories?post=103407"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/tags?post=103407"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}