diff options
| author | Florian Westphal <fw@strlen.de> | 2018-04-19 11:00:28 +0200 |
|---|---|---|
| committer | Florian Westphal <fw@strlen.de> | 2018-04-19 11:26:17 +0200 |
| commit | 8a85a148d0a4765cf15b05e2b3088a1a0562bf50 (patch) | |
| tree | c899bee438bb684c4066773483aeffb8bc22d2dd /extensions/libebt_ip.txlate | |
| parent | b6f0bec11e2cc7c3f99d432a5e1204a855f361dd (diff) | |
libebt_ip: fix translations for tos and icmp
tos translation to dscp yielded incorrect value.
icmp inserted extra "ip" keyword, remove it.
Signed-off-by: Florian Westphal <fw@strlen.de>
Diffstat (limited to 'extensions/libebt_ip.txlate')
| -rw-r--r-- | extensions/libebt_ip.txlate | 8 |
1 files changed, 4 insertions, 4 deletions
diff --git a/extensions/libebt_ip.txlate b/extensions/libebt_ip.txlate index 11594cdc..cbe05f4f 100644 --- a/extensions/libebt_ip.txlate +++ b/extensions/libebt_ip.txlate @@ -5,7 +5,7 @@ ebtables-translate -I FORWARD --ip-dst 10.0.0.1 nft insert rule bridge filter FORWARD ip daddr 10.0.0.1 counter ebtables-translate -I OUTPUT 3 -o eth0 --ip-tos 0xff -nft insert rule bridge filter OUTPUT oifname "eth0" ip dscp 0xFC counter +nft insert rule bridge filter OUTPUT oifname "eth0" ip dscp 0x3f counter ebtables-translate -A FORWARD --ip-proto tcp --ip-dport 22 nft add rule bridge filter FORWARD tcp dport 22 counter @@ -17,10 +17,10 @@ ebtables-translate -A FORWARD --ip-proto 253 nft add rule bridge filter FORWARD ip protocol 253 counter ebtables-translate -A FORWARD --ip-icmp-type "echo-request" -nft add rule bridge filter FORWARD ip icmp type 8 counter +nft add rule bridge filter FORWARD icmp type 8 counter ebtables-translate -A FORWARD --ip-icmp-type 1/1 -nft add rule bridge filter FORWARD ip icmp type 1 ip icmp code 1 counter +nft add rule bridge filter FORWARD icmp type 1 icmp code 1 counter ebtables-translate -A FORWARD --ip-icmp-type ! 1:10 -nft add rule bridge filter FORWARD ip icmp type != 1-10 counter +nft add rule bridge filter FORWARD icmp type != 1-10 counter |