michael/webmin
1
0
Fork 0
mirror of https://github.com/webmin/webmin.git synced 2026-09-08 14:40:39 +01:00
Code Issues Actions 3 Packages Projects Releases Wiki Activity

Cleanup help and comment

Browse Source
This commit is contained in:
Joe Cooper
2026-09-06 01:08:47 -05:00
parent 2aab9aa69f
commit 7f44387028
2 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
nftables/help/intro.html
View File

@@ -1,5 +1,5 @@
<header>Introduction</header>
<p>nftables stores firewall rules in tables. Each table belongs to a family (such as <tt>inet</tt>, <tt>ip</tt>, or <tt>ip6</tt>) and contains one or more chains. Chains contain rules, and each rule is a sequence of tests (matches) followed by an action like <tt>accept</tt>, <tt>drop</tt>, <tt>jump</tt>, or <tt>log</tt>. Named sets can group addresses or services for reuse in multiple rules.</p>
<p>Rules are stored in the system's own nftables configuration file &mdash; <tt>/etc/nftables.conf</tt> or <tt>/etc/sysconfig/nftables.conf</tt>, whichever the <tt>nftables</tt> service loads on this system. Anything already in that file, such as comments, <tt>define</tt> variables and <tt>include</tt> lines, is left alone. The <tt>nftables</tt> service loads that file at boot, so rules saved here survive a reboot in the same way as rules written by hand.</p>
<p>Rules are stored in the system's nftables configuration file &mdash; <tt>/etc/nftables.conf</tt> or <tt>/etc/sysconfig/nftables.conf</tt>, whichever the <tt>nftables</tt> service loads on this system. Anything already in that file, such as comments, <tt>define</tt> variables and <tt>include</tt> lines, is left alone. The <tt>nftables</tt> service loads that file at boot, so rules saved here survive a reboot in the same way as rules written by hand.</p>
<p>To get started, use the Setup page to create a default ruleset, or create a table and chain manually. Then add rules (and sets) from the table view. When you are ready to activate your changes, click Apply Configuration to load the ruleset into the kernel.</p>
<footer>nft(8)</footer>

2
nftables/t/run-tests.t
View File

@@ -493,7 +493,7 @@ ok(scalar(grep { $_ eq '2022' }
@{$profile_table->{sets}->{profile_hosting_tcp_ports}->{elements}}),
'profile helper includes dynamic ssh port');
# The saved configuration is now the system's own nftables file, so re-writing
# The saved configuration is the system's own nftables file, so re-writing
# it must not discard anything the module does not model
my $sysfile = write_ruleset($confdir, 'system.nft', <<'EOF');
#!/usr/sbin/nft -f