{"id":38916,"date":"2019-10-31T22:26:43","date_gmt":"2019-10-31T19:26:43","guid":{"rendered":"https:\/\/prohoster.info\/blog\/v-debian-11-predlagaetsya-po-umolchaniyu-zadejstvovat-nftables-i-firewalld\/"},"modified":"2019-10-31T22:26:43","modified_gmt":"2019-10-31T19:26:43","slug":"v-debian-11-predlagaetsya-po-umolchaniyu-zadejstvovat-nftables-i-firewalld","status":"publish","type":"post","link":"https:\/\/prohoster.info\/hu\/blog\/news\/v-debian-11-predlagaetsya-po-umolchaniyu-zadejstvovat-nftables-i-firewalld","title":{"rendered":"A Debian 11 alap\u00e9rtelmez\u00e9s szerint az nftables \u00e9s a firewalld haszn\u00e1lat\u00e1t javasolja.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Arturo Borrero, a Debian developer and a member of the Coreteam of the Netfilter project, is responsible for maintaining the Debian packages associated with nftables, iptables, and netfilter. aj\u00e1nlotta<\/a><\/noindex> to translate the significant next release of the Debian 11 distribution to default to nftables. If this proposal is approved, packages with iptables will be classified as optional options and will not be included in the base distribution.<\/p>\n

The Nftables packet filter is notable for unifying the filtering interfaces for IPv4, IPv6, ARP, and network bridges. Nftables provides a kernel-level generic interface that is protocol-independent and offers core functions for extracting data from packets, performing data operations, and managing traffic. The actual filtering logic and protocol-specific handlers are compiled into bytecode in user space, which is then loaded into the kernel through the Netlink interface and executed in a special virtual machine resembling BPF (Berkeley Packet Filters). <\/p>\n

By default, Debian 11 also offers to utilize the dynamic firewall firewalld, designed as a wrapper over nftables. Firewalld runs as a background process, allowing for dynamic changes to the packet filtering rules via DBus, without the need to reload the filtering rules or disrupt established connections. The firewall is managed using the firewall-cmd utility, which, when creating rules, is based not on IP-c\u00edmek<\/a>, h\u00e1l\u00f3zati interf\u00e9szek \u00e9s portsz\u00e1mok, valamint a szolg\u00e1ltat\u00e1sok nevei (p\u00e9ld\u00e1ul az SSH-hozz\u00e1f\u00e9r\u00e9s enged\u00e9lyez\u00e9s\u00e9hez futtassa a «firewall-cmd —add —service=ssh» parancsot, az SSH lez\u00e1r\u00e1s\u00e1hoz pedig a «firewall-cmd —remove —service=ssh» parancsot).<\/p>\n

<\/a><\/noindex><\/p>\n

Forr\u00e1s: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0410\u0440\u0442\u0443\u0440\u043e \u0411\u043e\u0440\u0440\u0435\u0440\u043e (Arturo Borrero), \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a Debian, \u0432\u0445\u043e\u0434\u044f\u0449\u0438\u0439 \u0432 Coreteam \u043f\u0440\u043e\u0435\u043a\u0442\u0430 Netfilter \u0438 \u0441\u043e\u043f\u0440\u043e\u0432\u043e\u0436\u0434\u0430\u044e\u0449\u0438\u0439 \u0432 Debian \u043f\u0430\u043a\u0435\u0442\u044b, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 nftables, iptables \u0438 netfilter, \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0438\u043b \u043f\u0435\u0440\u0435\u0432\u0435\u0441\u0442\u0438 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0439 \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u0432\u044b\u043f\u0443\u0441\u043a \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430 Debian 11 \u043d\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 nftables \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e. \u0412 \u0441\u043b\u0443\u0447\u0430\u0435 \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u044f \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u043f\u0430\u043a\u0435\u0442\u044b \u0441 iptables \u0431\u0443\u0434\u0443\u0442 \u043f\u0435\u0440\u0435\u0432\u0435\u0434\u0435\u043d\u044b \u0432 \u0440\u0430\u0437\u0440\u044f\u0434 \u043d\u0435\u043e\u0431\u044f\u0437\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u043e\u043f\u0446\u0438\u0439, \u043d\u0435 \u0432\u0445\u043e\u0434\u044f\u0449\u0438\u0445 \u0432 \u0431\u0430\u0437\u043e\u0432\u0443\u044e \u043f\u043e\u0441\u0442\u0430\u0432\u043a\u0443. \u041f\u0430\u043a\u0435\u0442\u043d\u044b\u0439 \u0444\u0438\u043b\u044c\u0442\u0440 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-38916","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Debian 11 proposes to utilize nftables and firewalld by default | ProHoster","description":"Arturo Borrero, a Debian developer and a member of the Coreteam of the Netfilter project, is responsible for maintaining the Debian packages associated with nftables, iptables, and netfilter.","canonical_url":"https:\/\/prohoster.info\/hu\/blog\/news\/v-debian-11-predlagaetsya-po-umolchaniyu-zadejstvovat-nftables-i-firewalld","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"hu_HU","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 Debian 11 \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u0435\u0442\u0441\u044f \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u0442\u044c nftables \u0438 firewalld | ProHoster","og:description":"\u0410\u0440\u0442\u0443\u0440\u043e \u0411\u043e\u0440\u0440\u0435\u0440\u043e (Arturo Borrero), \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a Debian, \u0432\u0445\u043e\u0434\u044f\u0449\u0438\u0439 \u0432 Coreteam \u043f\u0440\u043e\u0435\u043a\u0442\u0430 Netfilter \u0438 \u0441\u043e\u043f\u0440\u043e\u0432\u043e\u0436\u0434\u0430\u044e\u0449\u0438\u0439 \u0432 Debian \u043f\u0430\u043a\u0435\u0442\u044b, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 nftables, iptables \u0438 netfilter,","og:url":"https:\/\/prohoster.info\/hu\/blog\/news\/v-debian-11-predlagaetsya-po-umolchaniyu-zadejstvovat-nftables-i-firewalld","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:26:43+00:00","article:modified_time":"2019-10-31T19:26:43+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"38916","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-08 20:44:57","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:00:27","updated":"2026-02-08 20:44:57","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/38916","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/comments?post=38916"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/38916\/revisions"}],"predecessor-version":[{"id":157996,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/38916\/revisions\/157996"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/media?parent=38916"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/categories?post=38916"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/tags?post=38916"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}