-
Приветствую.
OpenWRT 22, zapret, nftables, nfqws dns yandex на нестандартном порту
Много-много раз прогонял блокчек, менял настройки конфига, чаще всего получал результат:
- работают rutracker, …
-
GCP上新开的实例,安装后配置监听端口443和跳跃端口都不通。
再修改监听端口为其他、跳跃端口为其他,还是不通。
再于是DD了系统到Debian 12再安装面板,还是不论怎么设置,端口还是不通。
但是搭建的x-ui面板、以及安装配置的sing-box、openvpn的端口,或是其他配置的端口就不会不通。
有其他网友也有这样的情况吗?
-
### Describe the bug
I have a firewall box running nix, which defines VLAN network interfaces, which it manages with nftables. I attempted to add a flow offload table, but when that gets added, `nf…
-
## Affected Puppet, Ruby, OS and module versions/distributions
Puppet: PE 2021.4
RHEL 8.5
## How to reproduce (e.g Puppet code you use)
This was for an initial Code Manager deployment, u…
-
The PR #1539 ([GSoC] Add nftables based network locking/unlocking) isn't good, although it has the better performance compared with iptables cmd. The tcp connection can be locked/unlocked by nftables …
-
"Chain already exists" errors on newer kernels seem to cause connections to drop. A second reload of the ruleset applies it without errors (always).
A possible solution has been added to this thread …
-
I make `GetRule()` call in the following way.
```go
tb := &nftables.Table{
Name: tableName,
}
if v == "4" {
tb.Family = nftables.TableFamilyIPv4
} else {
tb.Family = nftables.Table…
-
### Describe the feature or change in detail
Maybe, since the package is available in [GitHub](https://github.com/google/nftables) (open source) we can replace the iptables to the nftables since it…
-
I think we should consider the following changes:
Modularize FireHOL so that it can support multiple backends.
iptables is one
nftables can be another
This modularization should keep the core logic …
-
We've had some iptables/nftables duality for a while now, and it seems we should focus on a single one. Since `nftables` has been around and the default for 3 releases already (Debian 10 through 12), …