Learn how to disable iptables & enable nftables. Our Server Management Support team is here to help you with your questions and concerns.

How to Disable iptables & Enable nftables

Although iptables is a popular tool, nftables is a more recent replacement that offers improved performance. Furthermore, it offers a streamlined syntax for creating firewall rules.

If we want to disable iptables and enable nftables, here is a handy guide:

1. First, we have to check if nftables is installed on our system. We can do this by running the following command:

   sudo apt-get install nftables  # On Debian/UbuntuCopy Code
2. Then, we have to stop and disable iptables to prevent any conflicts. The commands for this depend on our Linux distribution.

   For instance, on Debian/Ubuntu, you can use:

   sudo systemctl stop iptables
   sudo systemctl disable iptablesCopy Code

   On CentOS/Fedora:

   sudo systemctl stop firewalld
   sudo systemctl disable firewalldCopy Code
3. Then we can enable and start nftables:

   sudo systemctl enable nftables
   sudo systemctl start nftablesCopy Code

How to Configure nftables Rules

Now, we have to create a configuration file for nftables. We have to open the file in a text editor and start adding our nftables rules.

For example, an equivalent rule in nftables to allow incoming SSH traffic looks like this:

Here, we are setting up a basic firewall rule allowing SSH traffic, established connections, related connections, and traffic from a specific IP range.

How to Apply nftables Rules

After configuring the nftables rules, we can apply them with this command:

sudo nft -f /etc/nftables.confCopy Code

Furthermore, we can make sure the nftables rules are applied every time our system starts with this command:

sudo systemctl enable nftablesCopy Code

Let us know if you need further help with disabling iptables and enabling nftables with ease.

[Need assistance with a different issue? Our team is available 24/7.]

Conclusion

In brief, our Support Techs demonstrated how to disable iptables & enable nftables.