iptables is totally screwed up, but have you tried nftables?
I've converted all my Linux servers to nftables specifically due to its syntax similarity to BSD
@qdemouliere @feld @kravietz
I understand that. I was just curious about how nftables was "similar to BSD pf".....I am not arguing, I just ask....
Perhaps the good of iptables was the one-liner capability (in some cases), while it looks like this is somehow limited in nftables...
I understand that. I was just curious about how nftables was "similar to BSD pf".....I am not arguing, I just ask....
Perhaps the good of iptables was the one-liner capability (in some cases), while it looks like this is somehow limited in nftables...
Follow
No, you can do both in nftables. Either command-line one liners:
nft add element inet main ossec4 { 10.10.10.10, 10.10.10.20 }
Or the same in config file format which is more suitable for atomic loads.
