Pambuyo pa chaka chimodzi ndi theka cha kupangidwa, mtundu 1.8.12 wa chida chodziwika bwino cha iptables packet filter management toolkit chatulutsidwa. Kupangidwa kwake posachedwapa kwayang'ana kwambiri pa zigawo zogwirizana ndi kubwerera m'mbuyo iptables-nft ndi ebtables-nft, zomwe zimapereka zofunikira ndi mawu ofanana ndi iptables ndi ebtables koma zimamasulira malamulo omwe amachokera mu nftables bytecode. Mapulogalamu oyambilira a iptables, kuphatikizapo ip6tables, arptables, ndi ebtables, adachotsedwa ntchito mu 2018 ndipo adasinthidwa kale ndi nftables m'magawo ambiri.
Mu mtundu watsopano:
- Pulogalamu ya iptables-nft tsopano ikuthandizira kuwonjezera ndi kusintha malamulo a atomiki mu malonda amodzi. *fyuluta -A FORWARD -m ndemanga --comment "lamulo latsopano likusinthidwa" -R FORWARD 1 -m ndemanga --comment "lamulo latsopano losinthira" COMMIT
- Pulogalamu ya xtables-monitor tsopano imathandizira kuzindikira ntchito zochotsera ma chain oyambira (INPUT, FORWARD, OUTPUT) ndikutulutsa lamulo lakuti "iptables -X chain_name" pankhaniyi.
- Kumasulira malamulo ndi protocol ya '-p sctp' mu mtundu wa nftables kwaperekedwa, koma popanda kufotokoza momveka bwino gawo la '-m sctp', monga momwe zachitikira pa TCP ndi UDP (ndikokwanira kufotokoza "-p tcp" kapena "-p udp", ndipo "-m tcp" kapena "-m udp" zidzagwiritsidwa ntchito zokha).
- Thandizo la phukusi la ICPM lopempha chidziwitso ndi mayankho a chidziwitso lawonjezeredwa.
- Tinakonza zolakwika mu iptables-translate ndi ip6tables-translate zomwe zimagwiritsidwa ntchito posintha malamulo kukhala nftables.
Source: opennet.ru
