Package Details: nftables-systemd-git r19.f989a7b-1

Package Base: nftables-systemd-git
Description: Control script for nftables with a systemd service file
Upstream URL: https://github.com/devkid/nftables-systemd
Category: network
Licenses: GPL
Submitter: devkid
Maintainer: devkid
Last Packager: None
Votes: 5
First Submitted: 2014-02-03 19:53
Last Updated: 2014-03-17 18:25

Dependencies (1)

Required by (0)

Sources

Latest Comments

Comment by anatolik

2014-06-19 22:05

Oops this package for systemd files only. Ignore my comment.

Comment by anatolik

2014-06-19 22:04

I suggest to merge this package into nftables-git to avoid duplication. nftables-git contains the systemd file from this package anyway.

I can orphan nftables-git so you can keep improving it.

Comment by aricart

2014-06-11 06:54

You need to load all of your nftables modules at boot else you'll get that crazy error m5f4k8 was getting. What I did was create /etc/modules-load.d/nftables.conf with the modules shown by "lsmod | grep nf".

Comment by nylocx

2014-05-23 13:52

I have the same problem as m5f4k8 and adding After=systemd-modules-load.service did not solve it.
So it seems to depend on something other that is not yet loaded.

Comment by devkid

2014-05-18 16:48

I can also just guess here. Maybe the relevant modules aren't loaded yet in the booting process?

You could try to place
After=systemd-modules-load.service
in the [Unit] section of the service file.

Comment by m5f4k8

2014-05-16 13:17

Looks like it's started too early in the boot process (some other requirement is not ready yet, but that's just a guess).
After every boot, I get an empty rule set, access to my system is completely open (no firewall at all, rules not applied), and there are error messages in the log:

May 16 14:50:45 cml.m5k8.net nftablesctl[307]: /etc/nftables/firewall.rules:14:1-2: Error: Could not process rule: No such file or directory
May 16 14:50:45 cml.m5k8.net nftablesctl[307]: table firewall {
May 16 14:50:45 cml.m5k8.net nftablesctl[307]: ^^

After I log in and do a manual nftablesctl restart, all rules are applied properly.

Comment by devkid

2014-03-17 18:26

I submitted this package when nftables was only available through AUR. Updated to depend on nftables instead of nftables-git and changed the install command for the renamed (nftables-ctl => nftablesctl) script.

Comment by x33a

2014-03-17 16:58

Is there a particular reason that this depends on nftables-git?

It works fine with the nftables in Community, for me.

Comment by anatolik

2014-02-09 04:05

The systemd files from nftables-systemd are added to nftables-git project.