Différences

Ci-dessous, les différences entre deux révisions de la page.

--- nftables [2023/03/01 12:30] – [nftables] pascal
+++ nftables [2023/07/04 10:55] (Version actuelle) – modification externe 127.0.0.1
@@ Ligne 1: / Ligne 1: @@
 ====== nftables (en construction) ======
 ===== Présentation =====
-ntpd est un daemon qui permet de garder sa machine à l'heure en se synchronisant sur des serveurs de temps. A noté que les machines virtuelles n'ont pas besoin de se synchroniser puisqu'elles utilisent l'horloge de leur hôte.
+nftables permet de contrôler et gérer le trafic réseau.
+  * autoriser ou interdire,
+  * rediriger.
 ===== Installation =====
 <code>
-root@mazarini:~# apt-get install ntp
+root@mazarini:~# apt-get nftables
 </code>
-===== Configuration /etc/ntp.conf =====
+===== Configuration /etc/nftables.conf =====
 ==== Configuration initiale ====
+Il n'y a pas de règle activée.
 <file>
-# /etc/ntp.conf, configuration for ntpd; see ntp.conf(5) for help
+#!/usr/sbin/nft -f
-driftfile /var/lib/ntp/ntp.drift
+flush ruleset
+table inet filter {
-# Enable this if you want statistics to be logged.
+	chain input {
-#statsdir /var/log/ntpstats/
+		type filter hook input priority 0;
+	}
-statistics loopstats peerstats clockstats
+	chain forward {
-filegen loopstats file loopstats type day enable
+		type filter hook forward priority 0;
-filegen peerstats file peerstats type day enable
+	}
-filegen clockstats file clockstats type day enable
+	chain output {
+		type filter hook output priority 0;
+	}
-# You do need to talk to an NTP server or two (or three).
+}
-#server ntp.your-provider.example
-# pool.ntp.org maps to about 1000 low-stratum NTP servers.  Your server will
-# pick a different set every time it starts up.  Please consider joining the
-# pool: <http://www.pool.ntp.org/join.html>
-server 0.debian.pool.ntp.org iburst
-server 1.debian.pool.ntp.org iburst
-server 2.debian.pool.ntp.org iburst
-server 3.debian.pool.ntp.org iburst
-# Access control configuration; see /usr/share/doc/ntp-doc/html/accopt.html for
-# details.  The web page <http://support.ntp.org/bin/view/Support/AccessRestrictions>
-# might also be helpful.
-#
-# Note that "restrict" applies to both servers and clients, so a configuration
-# that might be intended to block requests from certain clients could also end
-# up blocking replies from your own upstream servers.
-# By default, exchange time with everybody, but don't allow configuration.
-restrict -4 default kod notrap nomodify nopeer noquery
-restrict -6 default kod notrap nomodify nopeer noquery
-# Local users may interrogate the ntp server more closely.
-restrict 127.0.0.1
-restrict ::1
-# Clients from this (example!) subnet have unlimited access, but only if
-# cryptographically authenticated.
-#restrict 192.168.123.0 mask 255.255.255.0 notrust
-# If you want to provide time to your local subnet, change the next line.
-# (Again, the address is an example only.)
-#broadcast 192.168.123.255
-# If you want to listen to time broadcasts on your local subnet, de-comment the
-# next lines.  Please do this only if you trust everybody on the network!
-#disable auth
-#broadcastclient
 </file>
 ==== Choisir son serveur de référence ====