Arch Linux

Jansi

Member

Registered: 2015-09-08

Posts: 2

[SOLVED] nftables fails to start

When starting nftables 1:0.4-4 (linux 4.1.5) with the default config, I get the following error:

E: Unable to open Netlink socket: Protocol not supported

/etc/nftables.conf

table inet filter {
  chain input {
    type filter hook input priority 0;

    # allow established/related connections
    ct state {established, related} accept

    # early drop of invalid connections
    ct state invalid drop

    # allow from loopback
    iifname lo accept

    # allow icmp
    ip protocol icmp accept
    ip6 nexthdr icmpv6 accept

    # allow ssh
    tcp dport ssh accept

    # everything else
    reject with icmp type port-unreachable
  }
  chain forward {
    type filter hook forward priority 0;
    drop
  }
  chain output {
    type filter hook output priority 0;
  }

}

Last edited by Jansi (2015-09-10 19:12:30)

Jansi

Member

Registered: 2015-09-08

Posts: 2

Re: [SOLVED] nftables fails to start

It just needed a reboot.