Commit 0b132590 authored by Arturo Borrero Gonzalez's avatar Arturo Borrero Gonzalez
Browse files

d/README.Debian: refresh



A bit more info.

Git-Dch: Ignore
Signed-off-by: default avatarArturo Borrero Gonzalez <arturo@debian.org>
parent 5cda5e1c
...@@ -10,7 +10,8 @@ If you would like to migrate or translate your previous ...@@ -10,7 +10,8 @@ If you would like to migrate or translate your previous
iptables/ip6tables/arptables/ebtables rulesets to nftables then keep reading. iptables/ip6tables/arptables/ebtables rulesets to nftables then keep reading.
There are some tools in place to help you moving from iptables to nftables, There are some tools in place to help you moving from iptables to nftables,
following 2 basic approaches: (tools included in `iptables-nftables-compat` package) following 2 basic
approaches:
* command line translation * command line translation
(iptables-translate, iptables-restore-translate, (iptables-translate, iptables-restore-translate,
...@@ -23,6 +24,7 @@ following 2 basic approaches: ...@@ -23,6 +24,7 @@ following 2 basic approaches:
Documentation on how to use these tools can be found at: Documentation on how to use these tools can be found at:
* https://wiki.debian.org/Moving_from_iptables_to_nftables
* https://wiki.nftables.org/wiki-nftables/index.php/Moving_from_iptables_to_nftables * https://wiki.nftables.org/wiki-nftables/index.php/Moving_from_iptables_to_nftables
* xtables-compat(8) manpage * xtables-compat(8) manpage
* xtables-translate(8) manpage * xtables-translate(8) manpage
...@@ -54,12 +56,12 @@ kernel subsystem) are installed as: ...@@ -54,12 +56,12 @@ kernel subsystem) are installed as:
* /sbin/ebtables-compat * /sbin/ebtables-compat
All of them from the `iptables-nftables-compat` Debian package and have more All of them from the `iptables-nftables-compat` Debian package and have more
default priority, which means that if you install the package, you will be default priority, which means that if you install that package, you will be
using now the compat tools instead of the legacy ones. using the compat tools instead of the legacy ones.
You can change this at runtime using the `update-alternatives` command. You can change this at runtime using the `update-alternatives` command.
NOTE: make sure you don't share iptables-legacy and iptables-compat (nftables) NOTE: make sure you don't mix iptables-legacy and iptables-compat (nftables)
rulesets in the same machine at the same time just for sanity and to avoid rulesets in the same machine at the same time just for sanity and to avoid
unexpected behaviours in your network. unexpected behaviours in your network.
......
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment