nftables

A rust library to create and manage nftables firewalls

Mirrored to https://gitlab.b-data.ch/docker/docker-swarm-ipv6-nftables and https://github.com/b-data/docker-swarm-ipv6-nftables.

Programmatically interact with firewalld using Go.

[proven] Blocks DNS queries based on whitelists (or blacklists)

Drop repeat-offending IP addresses in-kernel (netfilter)

A Rust crate for Linux Netlink Nftables client for direct control on the netfilter via netlink socket.

[WIP] Dynamic blacklisting for goats.