Hi list,

I’m studying nftables. I’m using CentOS 8.1 (Gnome) and I disabled firewalld. I noticed that a default policy is created with tables and chains probably for firewalld.

So I created a .nft script where I stored my rules with a flush for previous ruleset, then saved on /etc/sysconfig/nftables.conf and the enabled nftables service.

Running the script with nft -f script.nft all work as expected but when rebooting, running nft list ruleset I find my rules and the default policy (chains and tables) that I would not have in my configuration.

My nftables.conf contains only my ruleset.

For example, running nft list tables I found several default tables like:

table ip filter table ip6 filter table bridge filter table ip nat table ip mangle

So probably there is something that is applying its policy but I ignore what is.

Can someone point me in the right direction?

Thank you in advance.