diff options
Diffstat (limited to 'extensions/libipt_ah.txlate')
-rw-r--r-- | extensions/libipt_ah.txlate | 8 |
1 files changed, 8 insertions, 0 deletions
diff --git a/extensions/libipt_ah.txlate b/extensions/libipt_ah.txlate new file mode 100644 index 00000000..ea3ef3e9 --- /dev/null +++ b/extensions/libipt_ah.txlate @@ -0,0 +1,8 @@ +iptables-translate -A INPUT -p 51 -m ah --ahspi 500 -j DROP +nft add rule ip filter INPUT ah spi 500 counter drop + +iptables-translate -A INPUT -p 51 -m ah --ahspi 500:600 -j DROP +nft add rule ip filter INPUT ah spi 500-600 counter drop + +iptables-translate -A INPUT -p 51 -m ah ! --ahspi 50 -j DROP +nft add rule ip filter INPUT ah spi != 50 counter drop |