diff options
| author | Florian Westphal <fw@strlen.de> | 2018-04-13 17:40:56 +0200 |
|---|---|---|
| committer | Florian Westphal <fw@strlen.de> | 2018-04-13 22:17:34 +0200 |
| commit | e67c08880961f64984b396d6e8ad6bad04546253 (patch) | |
| tree | 6aeef3826addf24e1c4b973de54a836c76626abe /extensions/libebt_ip.txlate | |
| parent | 207dd5e853e42b4477f4cb7234fc28bb6b30275d (diff) | |
ebtables-translate: add initial test cases
Signed-off-by: Florian Westphal <fw@strlen.de>
Diffstat (limited to 'extensions/libebt_ip.txlate')
| -rw-r--r-- | extensions/libebt_ip.txlate | 17 |
1 files changed, 17 insertions, 0 deletions
diff --git a/extensions/libebt_ip.txlate b/extensions/libebt_ip.txlate new file mode 100644 index 00000000..7f08f71d --- /dev/null +++ b/extensions/libebt_ip.txlate @@ -0,0 +1,17 @@ +ebtables-translate -A FORWARD --ip-src ! 192.168.0.0/24 -j ACCEPT +nft add rule bridge filter FORWARD ip saddr != 192.168.0.0/24 counter accept + +ebtables-translate -I FORWARD --ip-dst 10.0.0.1 +nft insert rule bridge filter FORWARD ip daddr 10.0.0.1 counter + +ebtables-translate -I OUTPUT 3 -o eth0 --ip-tos 0xff +nft insert rule bridge filter OUTPUT position 3 ip dscp 0xFC counter + +ebtables-translate -A FORWARD --ip-proto tcp --ip-dport 22 +nft add rule bridge filter FORWARD tcp dport 22 counter + +ebtables-translate -A FORWARD --ip-proto udp --ip-sport 1024:65535 +nft add rule bridge filter FORWARD udp sport 1024-65535 counter + +ebtables-translate -A FORWARD --ip-proto 253 +nft add rule bridge filter FORWARD ip protocol 253 counter |