Linked by Thom Holwerda on Fri 20th Mar 2009 22:01 UTC, submitted by diegocg
The Netfilter development team's Patrick McHardy has released an alpha version of nftables, a new firewall implementation for the Linux kernel, with a user space tool for controlling the firewall. nftables introduces a fundamental distinction between the user space defined rules and network objects in the kernel: the kernel component works with generic data such as IP addresses, ports and protocols and provides some generic operations for comparing the values of a packet with constants or for discarding a packet.
Permalink for comment 354282
To read all comments associated with this story, please click here.
To read all comments associated with this story, please click here.
Member since:
2007-03-14
A port of pf to Linux wouldn't really be possible, it's very BSD specific.. a compatible rule syntax obviously would be possible.