DE

↑ ↓ select, Enter open, Esc close

Show the complete nftables ruleset with handles

harmless rootFirewalldebian, ubuntu
root@server
nft -a list ruleset

Shows the entire active ruleset in the netfilter kernel, including rules created by ufw, Fail2Ban, Docker or iptables-nft. The -a option appends # handle N to each rule. With this number, a single rule can be removed via nft delete rule <familie> <tabelle> <kette> handle N (family, table, chain).

Note: On Debian 12 and Ubuntu 24.04, iptables is only a translation layer on top of nftables, which is why iptables rules appear here as tables ip filter or ip6 filter.

Also searched as

  • nft list ruleset
  • show all firewall rules nftables
  • delete nftables rule by handle

Related one-liners

All in Firewall

Create an IP blocklist set in nftables

#nft add set inet filter blocklist '{ type ipv4_addr; flags interval; }' && nft insert rule inet filter input ip saddr @blocklist drop
cautionFirewall

Open a port with nftables

#nft insert rule inet filter input tcp dport 443 accept
cautionFirewall

Add an IP address to an nftables blocklist

#nft add element inet filter blocklist '{ 203.0.113.25 }'
cautionFirewall

Delete a ufw rule by number

#ufw delete 3
cautionFirewall

List ufw rules with numbers

#ufw status numbered
harmlessFirewall

Allow a port only from a specific IP with ufw

#ufw allow from 198.51.100.0/24 to any port 22 proto tcp
cautionFirewall

Read first, then run.

The commands on myline.de act directly on servers, files and databases. A wrong path or placeholder can delete data irreversibly or make a server unreachable.

  • All commands are provided without warranty and are not tested on every system.
  • Understand what a command does before running it, and check every placeholder.
  • Make a backup first and, if possible, try it on a test system.
  • You run commands at your own risk. Liability for damages is excluded to the extent permitted by law.