Protecting Incoming Traffic with Nftables

[@aliroumie3775]

Best nftables guide on the entire web. A master class!

[@LinuxCloudHacks]

Thank you! Glad you liked it. I’m planning to release few more videos on that topic like tracing and logging, some tips etc. so please stay tuned.

[@dcoffey48]

This is the best explanation of a simple nftables firewall rule I have seen so far. Very well presented and logically structured progression. Keep it up.

[@LinuxCloudHacks]

Glad it was helpful!

[@PortsmouthHarbourBoats]

Thank you for your videos Filip. Just a home lab user here and have learnt so much that I've been able to build my own firewall with Alpine Linux + NF and just the rues I need, now I understand how it works from your tuition. Your videos are the best on the internet. Easy to follow with practical examples and no BS.

[@LinuxCloudHacks]

Great to hear! Nice work on the firewall! Keep experimenting as it's the best way to learn!

[@QAZAQ-6666]

Thanks 💯

[@LinuxCloudHacks]

Glad it was helpful!

[@ghettosapien1392]

OUTSTANDING! This is the best tutorial of nftables I've seen.

[@LinuxCloudHacks]

Wow, thanks! It'm trying to build a NFtables series. In few days there will be a video about DNAT, then load balancing, another one about logging and tracing. Stay tuned!

[@ghettosapien1392]

@@LinuxCloudHacks I am starting an MSSP for small and medium sized business. I'm planning to offer a Linux Firewall as an option to clients who can't afford FortiGate or Palo Alto. I've set up IPTables firewalls but NFTables is new to me. Your videos are very informative and thorough. I followed your examples and got a basic NFTables firewall up and running on my first try. It would be very helpful if you gave some examples of how to use the FORWARD chain to set up DMZ and LAN configurations using NFTables. Just a suggestion. Again, thanks for providing these tutorials.

[@LinuxCloudHacks]

Certainly! I'll work on such video.

[@rickpoeling6831]

Thank you for this excellent introduction on nftables. It's way better then all of the others I've watched.

[@LinuxCloudHacks]

Glad it was helpful! Thanks!

[@siddarthkumar1836]

I am glad I watched this video! So far the best resource and examples on nftables usage and optimisation. Thank you very much.

[@LinuxCloudHacks]

You're very welcome!

[@chasim1982]

Great Content Sir, really learned thanks a lot

[@LinuxCloudHacks]

My pleasure!

[@dpi3]

that was so freaking sweet! thanks will be watching the whole playlist rn

[@LinuxCloudHacks]

There are few more nftables videos on my todo list so please stay tuned!

[@familytamelo8140]

Thanks!

[@LinuxCloudHacks]

You bet!

[@miketancsa]

Great video! Really well organized. I come to it from a FreeBSD pf world and this was very understandable in its approach

[@LinuxCloudHacks]

Awesome, thank you!

[@astrogerard]

Thanks for this great video. Glad I found this channel and subscribed of course :-)

[@LinuxCloudHacks]

Welcome aboard!

[@SunshineFromWithin]

Great video!

[@LinuxCloudHacks]

Glad you enjoyed it! Thanks!

[@emilmalinov2893]

Great video. Very clear explanation. Helped me a lot.

[@LinuxCloudHacks]

Great to hear! There will be few more videos on NFT so stay tuned!

[@davidbrook1999]

Many thanks for a video that finally made sense of nftables. I really wish to convert my pf / openbsd router to Linux for better VM hardware passthrough features. This is the first video that has clarified the structure of nftables. Thank you, and very well done. I can now proceed... ;)

[@LinuxCloudHacks]

Glad it helped! Good luck in setting your new FW!

[@markvincent6275]

Well done! Thanks for the video

[@LinuxCloudHacks]

Glad you liked it! I'll be releasing few more videos about NFTables so please stay tuned.

[@arnejosteineidem3089]

Good work!

[@LinuxCloudHacks]

Thank you! Cheers!

[@JonahTheWhite]

Can you show how to do these firewall settings on an OpenWRT router's web interface (LUCI)?

[@LinuxCloudHacks]

Hi. It's been a while since I've played with OpenWrt but I believe when you use the web interface you are essentially modifying configuration file located at /etc/config/firewall that in turn is using fw4 rule builder to translate everything to nftables hence some stuff I'm talking about is already incorporated into the firewall and you are just adding individual allow rules. If I find some time I'm planning to create a video on building a general firewall so please stay tuned! Thanks!

[@andreymozjuhin6220]

where can I view the entered commands in text form?

[@LinuxCloudHacks]

Sorry for the form. I did copy/paste commands below. github.com/filip-lebiecki/nftables/blob/main/nftables-1.md

[@andreymozjuhin6220]

@@LinuxCloudHacks Hello, thank you for responding. And how do I get the text output of commands for the rest of the lessons? I think it will be useful for everyone, it is not convenient to rewrite commands from the screen. In general, you have excellent lessons, the most understandable visual ones that I have seen. thank you.

[@manjilunnobi]

Ubuntu nftable firewall videos Port create Input or output Forward All kind or secure

[@LinuxCloudHacks]

For sure I'll be doing more videos! Stay tuned!

[@familytamelo8140]

Like, subscribe!

[@LinuxCloudHacks]

Super!

[@AdrianuX1985]

+1

[@LinuxCloudHacks]

Thanks!

[@raunakchhatwal5350]

Is it just me or this DSL makes no sense? It's just a bunch of keywords that make on sense on its face. E.g.: "ct state new ip saddr . tcp dport @allowed_ips counter name cnt_ssh accept".

[@raunakchhatwal5350]

*no

[@LinuxCloudHacks]

Sorry you feel that way. This configuration is specific to NFTables Firewall. I agree. It's not easy to follow.