diff options
| author | Phil Sutter <phil@nwl.cc> | 2017-03-08 02:06:14 +0100 |
|---|---|---|
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2017-03-08 10:50:15 +0100 |
| commit | 9f972f4523339df45f0ae9409a3c897998f82fcc (patch) | |
| tree | 2f86a1369ddd6475dd5371fc0df6b3e4f06a82a1 /extensions/libipt_DNAT.c | |
| parent | 2c8e251ef83d0b8d0145c2cebd77edec538f1c85 (diff) | |
extensions: libxt_addrtype: Add translation to nft
Translate addrtype match into fib expression:
$ iptables-translate -A INPUT -m addrtype --src-type LOCAL
nft add rule ip filter INPUT fib saddr type local counter
$ iptables-translate -A INPUT -m addrtype --dst-type LOCAL
nft add rule ip filter INPUT fib daddr type local counter
$ iptables-translate -A INPUT -m addrtype ! --dst-type ANYCAST,LOCAL
nft add rule ip filter INPUT fib daddr type != { local, anycast } counter
$ iptables-translate -A INPUT -m addrtype --limit-iface-in --dst-type ANYCAST,LOCAL
nft add rule ip filter INPUT fib daddr . iif type { local, anycast } counter
Signed-off-by: Phil Sutter <phil@nwl.cc>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'extensions/libipt_DNAT.c')
0 files changed, 0 insertions, 0 deletions