For reference, this is the file
Code: Select all
#!/usr/sbin/nft -f
flush ruleset
table inet filter {
chain input {
type filter hook input priority 0;
}
chain forward {
type filter hook forward priority 0;
}
chain output {
type filter hook output priority 0;
}
}
Also, I should add that the nftables is NOT enabled nor started by default, but it is trivial to enable and start the service.
As root
Code: Select all
#systemctl enable nftables
#systemctl start nftables
Code: Select all
$ systemctl status nftables
Code: Select all
#systemctl status nftables