nftables does not read its conf file

  • Bonjour,


    I try to have nftables as my default firewal on omv, but someone (?) has written something somewhere that prevent nftables to read its configation file (/etc/nftables.conf).


    Whatever I write in this configation file, nft list ruleset -a returns:

    table inet filter { # handle 40

    chain input { # handle 1

    type filter hook input priority 0; policy accept;

    }


    chain forward { # handle 2

    type filter hook forward priority 0; policy accept;

    }


    chain output { # handle 3

    type filter hook output priority 0; policy accept;

    }

    }


    Thank you.


    F.P.

  • Bonjour,


    Nobody answered, so I give what I have done to use nftables.


    1- I deleted iptables alternatives:

    update-alternatives --remove iptables /usr/sbin/iptables-legacy

    update-alternatives --remove iptables /usr/sbin/iptables-nft


    Same for ip6tables:

    update-alternatives --remove ip6tables /usr/sbin/ip6tables-legacy

    update-alternatives --remove ip6tables /usr/sbin/ip6tables-nft


    2- I removed x-permissions from script

    /etc/iptables/openmediavault-firewall.sh

    chmod u-x g-x a-x /etc/iptables/openmediavault-firewall.sh


    3- I deleted all lines between <iptables> and </iptables> in xml config file /etc/openmediavault/config.xml


    4- I removed all kernel modules concerning iptables with rmmod


    And, at last, I could configure nftables.... and get it working.


    Next time I will remove iptables packages...


    That's all.


    F.P.

  • Good to read, please flag the post as "resolved' via 'edit thread' at top.

    Maybe applying Netiquette would have resulted in responses :)

    omv 6.9.6-2 (Shaitan) on RPi CM4/4GB with 64bit Kernel 6.1.21-v8+

    2x 6TB 3.5'' HDDs (CMR) formatted with ext4 via 2port PCIe SATA card with ASM1061R chipset providing hardware supported RAID1


    omv 6.9.3-1 (Shaitan) on RPi4/4GB with 32bit Kernel 5.10.63 and WittyPi 3 V2 RTC HAT

    2x 3TB 3.5'' HDDs (CMR) formatted with ext4 in Icy Box IB-RD3662-C31 / hardware supported RAID1

    For Read/Write performance of SMB shares hosted on this hardware see forum here

    • Offizieller Beitrag

    Next time I will remove iptables packages...

    Do that and you will remove OMV itself - https://github.com/openmediava…avault/debian/control#L18

    omv 7.0.5-1 sandworm | 64 bit | 6.8 proxmox kernel

    plugins :: omvextrasorg 7.0 | kvm 7.0.13 | compose 7.1.4 | k8s 7.1.0-3 | cputemp 7.0.1 | mergerfs 7.0.4


    omv-extras.org plugins source code and issue tracker - github - changelogs


    Please try ctrl-shift-R and read this before posting a question.

    Please put your OMV system details in your signature.
    Please don't PM for support... Too many PMs!

    • Offizieller Beitrag

    Don't worry!

    Oh I won't. That is just asking for trouble though.

    omv 7.0.5-1 sandworm | 64 bit | 6.8 proxmox kernel

    plugins :: omvextrasorg 7.0 | kvm 7.0.13 | compose 7.1.4 | k8s 7.1.0-3 | cputemp 7.0.1 | mergerfs 7.0.4


    omv-extras.org plugins source code and issue tracker - github - changelogs


    Please try ctrl-shift-R and read this before posting a question.

    Please put your OMV system details in your signature.
    Please don't PM for support... Too many PMs!

Jetzt mitmachen!

Sie haben noch kein Benutzerkonto auf unserer Seite? Registrieren Sie sich kostenlos und nehmen Sie an unserer Community teil!