{"id":38916,"date":"2019-10-31T22:26:43","date_gmt":"2019-10-31T19:26:43","guid":{"rendered":"https:\/\/prohoster.info\/blog\/v-debian-11-predlagaetsya-po-umolchaniyu-zadejstvovat-nftables-i-firewalld\/"},"modified":"2019-10-31T22:26:43","modified_gmt":"2019-10-31T19:26:43","slug":"v-debian-11-predlagaetsya-po-umolchaniyu-zadejstvovat-nftables-i-firewalld","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sv\/blog\/news\/v-debian-11-predlagaetsya-po-umolchaniyu-zadejstvovat-nftables-i-firewalld","title":{"rendered":"I Debian 11 f\u00f6resl\u00e5s det som standard att anv\u00e4nda nftables och firewalld.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Arturo Borrero, utvecklare av Debian och medlem av Coreteam f\u00f6r projektet Netfilter, som ansvarar f\u00f6r Debian-paketen relaterade till nftables, iptables och netfilter, f\u00f6reslog<\/a><\/noindex> att \u00f6vers\u00e4tta den f\u00f6ljande betydande utg\u00e5van av Debian 11 till att anv\u00e4nda nftables som standard. Om f\u00f6rslaget godk\u00e4nns, kommer paketen med iptables att klassas som valfria alternativ, som inte ing\u00e5r i grundinstallationen.<\/p>\n

Paketfiltren Nftables \u00e4r anm\u00e4rkningsv\u00e4rt f\u00f6r sin enhetlighet i gr\u00e4nssnitt f\u00f6r paketfiltrering f\u00f6r IPv4, IPv6, ARP och n\u00e4tverksbroar. Nftables erbjuder endast ett gemensamt gr\u00e4nssnitt p\u00e5 k\u00e4rnniv\u00e5, oberoende av specifika protokoll och tillhandah\u00e5ller grundl\u00e4ggande funktioner f\u00f6r att extrahera data fr\u00e5n paket, utf\u00f6ra operationer p\u00e5 data och hantera fl\u00f6den. Den specifika filtreringslogiken och protokollspecifika behandlarna kompileras till bytekod i anv\u00e4ndarutrymmet, som sedan laddas in i k\u00e4rnan via Netlink-gr\u00e4nssnittet och k\u00f6rs i en speciell virtuell maskin, liknande BPF (Berkeley Packet Filters). <\/p>\n

Som standard f\u00f6resl\u00e5s \u00e4ven att anv\u00e4nda den dynamiska brandv\u00e4ggen firewalld i Debian 11, som \u00e4r utformad som en kapsling ovanp\u00e5 nftables. Firewalld k\u00f6rs som en bakgrundsprocess som g\u00f6r det m\u00f6jligt att dynamiskt \u00e4ndra paketfiltreringsregler via DBus, utan behov av att starta om reglerna och utan att avbryta etablerade anslutningar. F\u00f6r att hantera brandv\u00e4ggen anv\u00e4nds verktyget firewall-cmd, som vid skapandet av regler baseras inte p\u00e5 IP-adresser<\/a>, n\u00e4tverksgr\u00e4nssnitt och portnummer, samt tj\u00e4nsternas namn (till exempel, f\u00f6r att \u00f6ppna \u00e5tkomst till SSH m\u00e5ste du k\u00f6ra «firewall-cmd —add —service=ssh», f\u00f6r att st\u00e4nga SSH — «firewall-cmd —remove —service=ssh»).<\/p>\n

<\/a><\/noindex><\/p>\n

K\u00e4lla: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0410\u0440\u0442\u0443\u0440\u043e \u0411\u043e\u0440\u0440\u0435\u0440\u043e (Arturo Borrero), \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a Debian, \u0432\u0445\u043e\u0434\u044f\u0449\u0438\u0439 \u0432 Coreteam \u043f\u0440\u043e\u0435\u043a\u0442\u0430 Netfilter \u0438 \u0441\u043e\u043f\u0440\u043e\u0432\u043e\u0436\u0434\u0430\u044e\u0449\u0438\u0439 \u0432 Debian \u043f\u0430\u043a\u0435\u0442\u044b, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 nftables, iptables \u0438 netfilter, \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0438\u043b \u043f\u0435\u0440\u0435\u0432\u0435\u0441\u0442\u0438 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0439 \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u0432\u044b\u043f\u0443\u0441\u043a \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430 Debian 11 \u043d\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 nftables \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e. \u0412 \u0441\u043b\u0443\u0447\u0430\u0435 \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u044f \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u043f\u0430\u043a\u0435\u0442\u044b \u0441 iptables \u0431\u0443\u0434\u0443\u0442 \u043f\u0435\u0440\u0435\u0432\u0435\u0434\u0435\u043d\u044b \u0432 \u0440\u0430\u0437\u0440\u044f\u0434 \u043d\u0435\u043e\u0431\u044f\u0437\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u043e\u043f\u0446\u0438\u0439, \u043d\u0435 \u0432\u0445\u043e\u0434\u044f\u0449\u0438\u0445 \u0432 \u0431\u0430\u0437\u043e\u0432\u0443\u044e \u043f\u043e\u0441\u0442\u0430\u0432\u043a\u0443. \u041f\u0430\u043a\u0435\u0442\u043d\u044b\u0439 \u0444\u0438\u043b\u044c\u0442\u0440 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-38916","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47I Debian 11 f\u00f6resl\u00e5s det som standard att anv\u00e4nda nftables och firewalld | ProHoster","description":"Arturo Borrero, utvecklare av Debian och medlem av Coreteam f\u00f6r projektet Netfilter, som ansvarar f\u00f6r Debian-paketen relaterade till nftables, iptables och netfilter,","canonical_url":"https:\/\/prohoster.info\/sv\/blog\/news\/v-debian-11-predlagaetsya-po-umolchaniyu-zadejstvovat-nftables-i-firewalld","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sv_SE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 Debian 11 \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u0435\u0442\u0441\u044f \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u0442\u044c nftables \u0438 firewalld | ProHoster","og:description":"\u0410\u0440\u0442\u0443\u0440\u043e \u0411\u043e\u0440\u0440\u0435\u0440\u043e (Arturo Borrero), \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a Debian, \u0432\u0445\u043e\u0434\u044f\u0449\u0438\u0439 \u0432 Coreteam \u043f\u0440\u043e\u0435\u043a\u0442\u0430 Netfilter \u0438 \u0441\u043e\u043f\u0440\u043e\u0432\u043e\u0436\u0434\u0430\u044e\u0449\u0438\u0439 \u0432 Debian \u043f\u0430\u043a\u0435\u0442\u044b, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 nftables, iptables \u0438 netfilter,","og:url":"https:\/\/prohoster.info\/sv\/blog\/news\/v-debian-11-predlagaetsya-po-umolchaniyu-zadejstvovat-nftables-i-firewalld","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:26:43+00:00","article:modified_time":"2019-10-31T19:26:43+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"38916","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-08 20:44:57","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:00:27","updated":"2026-02-08 20:44:57","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/38916","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/comments?post=38916"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/38916\/revisions"}],"predecessor-version":[{"id":157996,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/38916\/revisions\/157996"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/media?parent=38916"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/categories?post=38916"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/tags?post=38916"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}