• Skip to primary navigation
  • Skip to main content
  • Skip to primary sidebar
  • Skip to footer navigation

The Geek Diary

  • OS
    • Linux
    • CentOS/RHEL
    • Solaris
    • Oracle Linux
    • VCS
  • Interview Questions
  • Database
    • oracle
    • oracle 12c
    • ASM
    • mysql
    • MariaDB
  • DevOps
    • Docker
    • Shell Scripting
  • Big Data
    • Hadoop
    • Cloudera
    • Hortonworks HDP

How To Migrate Existing Iptables rules to Nftables In CentOS/RHEL 8

by admin

In CentOS/RHEL 8, the default iptables network packet filtering framework been replaced with the nftables framework. As the designated successor to iptables, ip6tables, arptables, and ebtables, the nftables framework includes packet classification facilities and several improvements, which provide added convenience and improved performance over the previously used packet-filtering tools.

In this post we will discuss on how to migrate existing iptables rules to nftables in CentOS/RHEL 7.

Display Exiting iptable rules in CentOS/RHEL 6,7

To Display the Existing rule on CentOS/RHEL 6,7 Server:

# iptables -L

DROP       udp  --  anywhere             anywhere             multiport dports epmap,microsoft-ds

DROP       udp  --  anywhere             anywhere             udp dpts:netbios-ns:netbios-ssn

DROP       udp  --  anywhere             anywhere             udp spt:netbios-ns dpts:1024:65535

DROP       tcp  --  anywhere             anywhere             multiport dports epmap,netbios-ssn,microsoft-ds

Steps

1. To save the existing rules to a file, run below command:

# iptables-save > rules.iptables

2. Move the step1 file to CentOS/RHEL 8 Server via scp or ftp. You can use vi editor as well to copy the content from CentOS/RHEL 6 or 7 machine.

3. Run the below command to generate the nft rules file on CentOS/RHEL 8 with iptables rules file.

# iptables-restore-translate -f rules.iptables > rules.nft

4. Load the rules in CentOS/RHEL 8 machine, make sure nftables service is running on the system.

# nft -f rules.nft     ### load the rule via nft to nftables.

5. To Display rule in CentOS/RHEL 8 Server .

# nft list ruleset

You can see the rules have been migrated from CentOS/RHEL 6 or 7 to CentOS/RHEL 8 server now and can test them as well.

Filed Under: CentOS/RHEL 6, CentOS/RHEL 7, CentOS/RHEL 8, Linux

Some more articles you might also be interested in …

  1. How To Create A SSH Banner in CentOS/RHEL Server
  2. What is the purpose of .bash_profile file under User Home Directory In Linux
  3. lynis Command Examples in Linux
  4. How to install packages using dnf in CentOS/RHEL 8
  5. blkdiscard Command Examples in Linux
  6. sox: command not found
  7. How to Disable “alt+ctrl+Del” Key Combination causing reboot in CentOS/RHEL 4,5
  8. sort Command Examples in Linux
  9. macchanger: command not found
  10. needrestart: command not found

You May Also Like

Primary Sidebar

Recent Posts

  • raw: command not found
  • raw Command Examples in Linux
  • rankmirrors Command Examples in Linux
  • radeontop: command not found

© 2023 · The Geek Diary

  • Archives
  • Contact Us
  • Copyright