Oops this package for systemd files only. Ignore my comment.
Search Criteria
Package Details: nftables-systemd-git r19.f989a7b-1
Package Actions
| Package Base: | nftables-systemd-git |
|---|---|
| Description: | Control script for nftables with a systemd service file |
| Upstream URL: | https://github.com/devkid/nftables-systemd |
| Category: | network |
| Licenses: | |
| Submitter: | devkid |
| Maintainer: | devkid |
| Last Packager: | None |
| Votes: | 5 |
| First Submitted: | 2014-02-03 19:53 |
| Last Updated: | 2014-03-17 18:25 |
Latest Comments
Comment by anatolik
Comment by anatolik
I suggest to merge this package into nftables-git to avoid duplication. nftables-git contains the systemd file from this package anyway.
I can orphan nftables-git so you can keep improving it.
Comment by aricart
You need to load all of your nftables modules at boot else you'll get that crazy error m5f4k8 was getting. What I did was create /etc/modules-load.d/nftables.conf with the modules shown by "lsmod | grep nf".
Comment by nylocx
I have the same problem as m5f4k8 and adding After=systemd-modules-load.service did not solve it.
So it seems to depend on something other that is not yet loaded.
Comment by devkid
I can also just guess here. Maybe the relevant modules aren't loaded yet in the booting process?
You could try to place
After=systemd-modules-load.service
in the [Unit] section of the service file.
Comment by m5f4k8
Looks like it's started too early in the boot process (some other requirement is not ready yet, but that's just a guess).
After every boot, I get an empty rule set, access to my system is completely open (no firewall at all, rules not applied), and there are error messages in the log:
May 16 14:50:45 cml.m5k8.net nftablesctl[307]: /etc/nftables/firewall.rules:14:1-2: Error: Could not process rule: No such file or directory
May 16 14:50:45 cml.m5k8.net nftablesctl[307]: table firewall {
May 16 14:50:45 cml.m5k8.net nftablesctl[307]: ^^
After I log in and do a manual nftablesctl restart, all rules are applied properly.
Comment by devkid
I submitted this package when nftables was only available through AUR. Updated to depend on nftables instead of nftables-git and changed the install command for the renamed (nftables-ctl => nftablesctl) script.
Comment by x33a
Is there a particular reason that this depends on nftables-git?
It works fine with the nftables in Community, for me.
Comment by anatolik
The systemd files from nftables-systemd are added to nftables-git project.