[CentOS] firewalld / iptables / nftables

Tue Jun 9 12:19:17 UTC 2020
Leon Fauster <leonfauster at googlemail.com>

Despite that the migration of our applications comes with a significant 
workload. It seems that also every aspect of common services had changed 
with EL8.

In EL8 firewalld uses nftables as backend. I wonder why iptables does 
not list any rules while also configured to use nftables as backend.

# iptables -V
iptables v1.8.2 (nf_tables)


# firewall-cmd --list-all |egrep -o '22|ssh'
ssh

# nft list ruleset | egrep -o '22|ssh'
ssh

# iptables -L -n | egrep -o '22|ssh'
<EMPTY>

Any hints?

--
Leon