nftables Rule Generator
Generate a Linux nftables rule draft for a network flow.
Générateur de règles firewall
Décrivez le flux puis générez une base de règle pour FortiGate, Windows Firewall ou Linux nftables.
Configuration générée
How to use nftables Rule Generator
Generate a Linux nftables rule draft for a network flow.
What this tool is for
A BAOI generator prepares a working baseline: command, rule or configuration. It cannot know every constraint in your environment and must never replace technical review.
Recommended workflow
- Enter parameters using the names, paths and values from your environment.
- Generate the command or configuration and review every produced option.
- Test first in a controlled scope before a wider deployment.
Best practices
- Never copy and run a privileged command without understanding its effect.
- Back up or export the existing configuration before a significant change.
- For destructive commands or security rules, prepare a rollback before execution.
Questions about this tool
Which fields are critical when generating generating an nftables rule?
Verify source, destination, protocol, ports, interface or zone, direction and action. A single broad field can make the rule much more permissive than intended.
Should I create a broad allow rule first and restrict it later?
No. Start from the narrowest required flow and expand only when a documented test proves that another flow is necessary.
What should I check after deployment?
Review rule order, hit counters/logs and the effective path from the real source to the real destination.