ARPTABLES-TRANSLATE(8) System Manager's Manual ARPTABLES-TRANSLATE(8) (NAME) arptables-translate - arptables nftables iptables-translate - iptables nftables ip6tables-translate - ip6tables nftables ebtables-translate - ebtables nftables (DESCRIPTION) iptables(8) ip6tables(8) ebtables(8) arptables(8) nftables(8) . : iptables-translate iptables-restore-translate ip6tables-translate ip6tables-restore-translate ebtables-translate arptables-translate (USAGE) iptables(8)/ip6tables(8)/ebtables(8)/arptables(8) nftables(8) . iptables-restore-translate iptables-save(8) . ip6tables-restore- translate ip6tables-save(8) . . iptables-translate iptables(8) ip6tables-translate ip6tables(8) . (EXAMPLES) . : root@machine:~# iptables-translate -A INPUT -p tcp --dport 22 -m conntrack --ctstate NEW -j ACCEPT nft add rule ip filter INPUT tcp dport 22 ct state new counter accept root@machine:~# ip6tables-translate -A FORWARD -i eth0 -o eth3 -p udp -m multiport --dports 111,222 -j ACCEPT nft add rule ip6 filter FORWARD iifname eth0 oifname eth3 meta l4proto udp udp dport { 111,222} counter accept : root@machine:~# iptables-save > save.txt root@machine:~# cat save.txt # Generated by iptables-save v1.6.0 on Sat Dec 24 14:26:40 2016 *filter :INPUT ACCEPT [5166:1752111] :FORWARD ACCEPT [0:0] :OUTPUT ACCEPT [5058:628693] -A FORWARD -p tcp -m tcp --dport 22 -m conntrack --ctstate NEW -j ACCEPT COMMIT # Completed on Sat Dec 24 14:26:40 2016 root@machine:~# iptables-restore-translate -f save.txt # Translated by iptables-restore-translate v1.6.0 on Sat Dec 24 14:26:59 2016 add table ip filter add chain ip filter INPUT { type filter hook input priority 0; } add chain ip filter FORWARD { type filter hook forward priority 0; } add chain ip filter OUTPUT { type filter hook output priority 0; } add rule ip filter FORWARD tcp dport 22 ct state new counter accept root@machine:~# iptables-restore-translate -f save.txt > ruleset.nft root@machine:~# nft -f ruleset.nft root@machine:~# nft list ruleset table ip filter { chain INPUT { type filter hook input priority 0; policy accept; } chain FORWARD { type filter hook forward priority 0; policy accept; tcp dport ssh ct state new counter packets 0 bytes 0 accept } chain OUTPUT { type filter hook output priority 0; policy accept; } } (LIMITATIONS) ( ) ( ). arptables(8) . : https://wiki.nftables.org (SEE ALSO) nft(8), iptables(8) (AUTHORS) nftables Netfilter (https://www.netfilter.org) . Arturo Borrero Gonzalez . GPLv2+ / . May 14, 2019 ARPTABLES-TRANSLATE(8)