diff options
| author | Shivani Bhardwaj <shivanib134@gmail.com> | 2016-02-24 01:19:34 +0530 |
|---|---|---|
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2016-02-29 13:32:48 +0100 |
| commit | a9a599ab675b8feb942355a24934901a9adcef1b (patch) | |
| tree | 872d0db62e83241488d4742e5a3760ae11e05869 /iptables/nft-ipv6.c | |
| parent | 3bc0951c107c5da741a330ba5df49a2c823f5e5d (diff) | |
comment: Add translation to nft
Add translation for match comment to nftables.
This patch also adds the relevant infrastructure for carrying out
the translation.
Example:
$ sudo iptables-translate -A INPUT -s 192.168.0.0 -m comment --comment "A privatized IP block"
nft add rule ip filter INPUT ip saddr 192.168.0.0 counter comment \"A privatized IP block\"
Signed-off-by: Shivani Bhardwaj <shivanib134@gmail.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'iptables/nft-ipv6.c')
| -rw-r--r-- | iptables/nft-ipv6.c | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/iptables/nft-ipv6.c b/iptables/nft-ipv6.c index 0ee79575..92d37a02 100644 --- a/iptables/nft-ipv6.c +++ b/iptables/nft-ipv6.c @@ -392,6 +392,7 @@ static void xlate_ipv6_addr(const char *selector, const struct in6_addr *addr, static int nft_ipv6_xlate(const void *data, struct xt_xlate *xl) { const struct iptables_command_state *cs = data; + const char *comment; int ret; if (cs->fw6.ipv6.iniface[0] != '\0') { @@ -435,6 +436,10 @@ static int nft_ipv6_xlate(const void *data, struct xt_xlate *xl) /* Always add counters per rule, as in iptables */ xt_xlate_add(xl, "counter "); + comment = xt_xlate_get_comment(xl); + if (comment) + xt_xlate_add(xl, "comment \\\"%s\\\" ", comment); + ret = xlate_action(cs, !!(cs->fw6.ipv6.flags & IP6T_F_GOTO), xl); return ret; |