IPSEC-CHECKNFLOG(8)
π IPSEC-CHECKNFLOG π
okay so bestie, listen up β this is a page from the Executable programs manual, and it's about a lil command called ipsec-checknflog. it's short, it's sweet, and it makes your firewall rules actually exist. let's get into it. π¦
β¨ NAME β¨
ipsec-checknflog β Initialise nftables or iptables rules for the nflog devices
like. that's the whole job. she sets things up so your nflog devices have rules in nftables or iptables. no cap. π
πΈ SYNOPSIS πΈ
ipsec checknflog connection [--config /etc/ipsec.conf]
[--ctlsocket /run/pluto/pluto.ctl]
so you run ipsec checknflog and hand her a connection β and yeah, she takes a --config and a --ctlsocket if you're feeling fancy. π
π DESCRIPTION π
checknflog initialises nftables or iptables rules for the nflog devices β but only when you actually asked for them, iykyk. you do that by specifying them via the nflog= or nflog-all= configuration options. π§
that's it! that's the whole description! she's a one-job icon and she ate. π
π«Ά SEE ALSO π«Ά
bestie there are SO many siblings. family reunion energy. here's the full guest list, no one gets left out:
ipsec.conf(5)ipsec(8)ipsec-add(8)ipsec-algparse(8)ipsec-briefconnectionstatus(8)ipsec-briefstatus(8)ipsec-certutil(8)ipsec-checknss(8)ipsec-connectionstatus(8)ipsec-crlutil(8)ipsec-delete(8)ipsec-down(8)ipsec-ecdsasigkey(8)ipsec-fetchcrls(8)ipsec-fipsstatus(8)ipsec-globalstatus(8)ipsec-import(8)ipsec-initnss(8)ipsec-letsencrypt(8)ipsec-listall(8)ipsec-listcacerts(8)ipsec-listcerts(8)ipsec-listcrls(8)ipsec-listen(8)ipsec-listpubkeys(8)ipsec-modutil(8)ipsec-newhostkey(8)ipsec-ondemand(8)ipsec-pk12util(8)ipsec-pluto(8)ipsec-purgeocsp(8)ipsec-redirect(8)ipsec-replace(8)ipsec-rereadall(8)ipsec-rereadcerts(8)ipsec-rereadsecrets(8)ipsec-restart(8)ipsec-route(8)ipsec-rsasigkey(8)ipsec-setup(8)ipsec-showhostkey(8)ipsec-showroute(8)ipsec-showstates(8)ipsec-shuntstatus(8)ipsec-start(8)ipsec-status(8)ipsec-stop(8)ipsec-trafficstatus(8)ipsec-unroute(8)ipsec-up(8)ipsec-vfychain(8)ipsec-whack(8)
literally the whole friend group. π
π BUGS π
none
not a single one. she is flawless and unbothered. periodt. β¨
π AUTHOR π
Andrew Cagney, Tuomo Soini
thank you kings π«‘
and that's the whole page!! you understood the assignment π this was Libreswan 5.4.1, dated 10/23/2026 β mwah, go initialise some firewall rules bestie ππΈ
π¦ where this page comes from
- fedora 43: libreswan 5.4.1-1.fc43 Β· GPL-2.0-or-later AND MPL-2.0
- fedora 44: libreswan 5.4.1-1.fc44 Β· GPL-2.0-or-later AND MPL-2.0
- π girlified by deepseek-ai/DeepSeek-V4.1-Flash on : a language model's rewrite of the original, under its terms