Installing nftables inside disp sys-dns

User Support General
1

1… goal:
…installed nftables in templatevm debian-12-xfce
… run them in disp q sys-dns…(disp q sys-dns has 2 templates if that matters)

2… templatevm:
…created “/etc/nftables.conf”
… added nftables

TEMPLATEVM DEBIAN-12-XFCE:

  1. sudo apt install nftables
  2. sudo nano /etc/nftables.conf
  3. added nftables to #2

SYS-DNS:

  1. create directory:
    …sudo mkdir -p /rw/config/nftables

  2. create nftables file:
    …sudo nano /rw/config/nftables/rules.nft

  3. add nftables to #2

4… create file for loading rules to boot auto:
…sudo nano /rw/config/rc.local

5… add to #4:
…nft -f /rw/config/nftables/rules.nft

  1. sudo chmod +x /rw/config/rc.local

  2. sudo systemctl enable nftables

  3. sudo systemctl start nftables

  4. sudo nft list ruleset

2

Shouldn’t this be nft -f /rw/config/nftables/rules.nft?

3

thx…it was just a typo in my post!

4

Nftables is already preinstalled in the default debian-12-xfce template.
You should add your custom firewall rules here:

5

Yeah, i looked at them, but limited success…

Can anyone glance at this & see either why rules not staying persistent or say whether or not rules need to bewritten in sys-dns or copied over from templatevm…?

Did this previously w/success. This time close but something is off…

thanks

6

If your sys-dns is a named disposable, then you need to make changes in its disposable template.
For example, sys-dns template is set to default-dvm disposable template and the template of default-dvm is debian-12-xfce.
You need to make changes in default-dvm app qube or in debian-12-xfce template.