Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

Certain upstream switch to `firewall4` aka `nftables` instead of `iptables`

See original GitHub issue

Hi all, especially @openwrt/luci-admin,

for the next OpenWrt release firewall4 is considered as a replacement of the current iptables based firewall package. While the configuration stays within /etc/config/firewall, packages using iptables directly may see trouble.

This is a heads up for everyone maintaining such packages but also please post packages here that would be affected so a smother migration is possible.

Heads up for packages.git: https://github.com/openwrt/packages/issues/16818 Heads up for routing.git: https://github.com/openwrt/routing/issues/731

Issue Analytics

State:
Created 2 years ago
Comments:14 (8 by maintainers)

Top GitHub Comments

1reaction

hnymancommented, Jan 7, 2022

I think that that Status->Firewall menu item and page is still totally iptables based after 48599d8d1d, right?

https://github.com/openwrt/luci/blob/master/modules/luci-mod-status/htdocs/luci-static/resources/view/status/iptables.js

0reactions

kode54commented, Jul 2, 2022

Oh, it was never closed: https://github.com/openwrt/luci/pull/5839

Top Results From Across the Web

Certain upstream switch to `firewall4` aka `nftables` instead of ...

Hi all, especially @openwrt/packages-write, for the next OpenWrt release firewall4 is considered as a replacement of the current iptables ...

Firewall4 / NFtables Tips and Tricks - OpenWrt Forum

Certain upstream switch to `firewall4 ` aka `nftables` instead of `iptables`. opened 05:49AM - 06 Oct 21 UTC. aparcar. help wanted.

Moving from iptables to nftables

This page gives information on moving/migrating from the old iptables/xtables (legacy) world to the new nftables framework.

Updated OpenWrt/muvirt/kernels + SFP info for LuCI

... with iptables rather than nftables (see openwrt/packages: Certain upstream switch to firewall4 aka nftables instead of iptables ).

Chapter 47. Getting started with nftables Red Hat Enterprise ...

If your firewall configuration still uses iptables rules, you can migrate your iptables rules to nftables . 47.1.1. When to use firewalld, nftables,...