NFT IP tables SystemD Open Ports for TCP/ip

[TomTravis]

ha ha ha
nftables in Debian the easy way

If you want to enable a default firewall in Debian, follow these steps:

aptitude install nftables

systemctl enable nftables.service

This way, nftables is active at boot. By default, rules are located in /etc/nftables.conf.
normal install with systemD running
the is not chroot using a chromeBook
what a fun experience

[TomTravis]

https://wiki.debian.org/nftables
https://wiki.nftables.org/wiki-nftables/index.php/Moving_from_iptables_to_nftables

1l.txt is legacy table
update-alternatives --set iptables /usr/sbin/iptables-legacy

sudo iptables-save > 1.txt
1.txt is new iptable

update-alternatives --set iptables /usr/sbin/iptables-nft # did not try
1,nft.txt is nft table

used sudo iptables-restore-translate -f 1.txt > 1.nft

1.nft.txt
1l.txt
1.txt

now using new iptable
the nft have errors
(kr)z@localhost:$ sudo nft -f 1.nft.txt
netlink: Error: cache initialization failed: Invalid argument
(kr)z@localhost:$

have no idea port 22 is open
sudo service ssh restart
in .bashrc

i now have a Laptop X1 carbon running debian 11 systemd and nft stuff it is easy if you have all the task processes running
attached is the services file
IPservices.txt

[TomTravis]

this appears where the legacy tables come from
chronos@localhost /sbin $ ls -la i*
-rwxr-xr-x. 1 root root 807 Oct 13 18:44 idectl
-rwxr-xr-x. 1 root root 24692 Oct 13 19:07 ifstat
-rwxr-xr-x. 1 root root 104128 Oct 13 19:38 init
-rwxr-xr-x. 1 root root 46832 Oct 13 19:38 initctl
lrwxrwxrwx. 1 root root 11 Oct 13 18:52 insmod -> ../bin/kmod
-rwxr-xr-x. 1 root root 2382 Oct 13 19:13 installkernel
-rwxr-xr-x. 1 root root 26516 Oct 13 19:52 integritysetup
lrwxrwxrwx. 1 root root 20 Oct 13 21:58 ip6tables -> xtables-legacy-multi
lrwxrwxrwx. 1 root root 20 Oct 13 19:05 ip6tables-legacy -> xtables-legacy-multi
lrwxrwxrwx. 1 root root 20 Oct 13 19:05 ip6tables-legacy-restore -> xtables-legacy-multi
lrwxrwxrwx. 1 root root 20 Oct 13 19:05 ip6tables-legacy-save -> xtables-legacy-multi
lrwxrwxrwx. 1 root root 20 Oct 13 21:58 ip6tables-restore -> xtables-legacy-multi
lrwxrwxrwx. 1 root root 20 Oct 13 21:58 ip6tables-save -> xtables-legacy-multi
-rwxr-xr-x. 1 root root 7944 Oct 13 18:51 ipmaddr
lrwxrwxrwx. 1 root root 20 Oct 13 21:58 iptables -> xtables-legacy-multi
lrwxrwxrwx. 1 root root 20 Oct 13 19:05 iptables-legacy -> xtables-legacy-multi
lrwxrwxrwx. 1 root root 20 Oct 13 19:05 iptables-legacy-restore -> xtables-legacy-multi
lrwxrwxrwx. 1 root root 20 Oct 13 19:05 iptables-legacy-save -> xtables-legacy-multi
lrwxrwxrwx. 1 root root 20 Oct 13 21:58 iptables-restore -> xtables-legacy-multi
lrwxrwxrwx. 1 root root 20 Oct 13 21:58 iptables-save -> xtables-legacy-multi
lrwxrwxrwx. 1 root root 20 Oct 13 21:58 iptables-xml -> xtables-legacy-multi
-rwxr-xr-x. 1 root root 10748 Oct 13 18:51 iptunnel
chronos@localhost /sbin $
crosh runs init

sudo apt purge systemd
install sysVinit as the change root startup
crostini is a container now it appears

[TomTravis]

move to chroot systemd project