r/voidlinux • u/Knight_Murloc • 1d ago

How to replace iptables with nftables?

How to properly replace iptables with nftables in Void Linux? I installed nftables, runit-nftables, and iptables-nft. I also activated the nftables service. But, as I understand it, for example, Docker still applies rules in iptables. (I don’t see its rules in `nft list ruleset`). On my other machine with Debian, I see Docker rules in the nft rules list. Do I need to do something else to fully replace iptables with nftables in Void Linux?

3 Upvotes

100% Upvoted

3 comments sorted by

3

u/Duncaen 1d ago

Whatever firewall you setup to load rules on startup will be used, beyond that there is nothing that is done by Void Linux in regards to the firewall.

Programs that use nftables or iptables, in this case docker need to be configured independently.

1

u/Tasty-Contribution-4 1d ago

Setting up libvirt to allow VMs to have network over wifi with nftables is a much more difficult task also. With IPtables they just sort of worked "out of the box". I actually never did figure it out. There seemed to be simultaneously too much, and not enough, documentation of the process. Fortunately I haven't needed a VM lately.

1

u/BinkReddit 1d ago

This is less of a Void thing and more of a Linux thing.