From b6f0bec11e2cc7c3f99d432a5e1204a855f361dd Mon Sep 17 00:00:00 2001 From: Florian Westphal Date: Wed, 18 Apr 2018 00:09:06 +0200 Subject: libebt_ip: add icmp support Was added to ebtables recently, so backport this to ebt-compat. Signed-off-by: Florian Westphal --- extensions/libebt_ip.txlate | 9 +++++++++ 1 file changed, 9 insertions(+) (limited to 'extensions/libebt_ip.txlate') diff --git a/extensions/libebt_ip.txlate b/extensions/libebt_ip.txlate index 4d31a700..11594cdc 100644 --- a/extensions/libebt_ip.txlate +++ b/extensions/libebt_ip.txlate @@ -15,3 +15,12 @@ nft add rule bridge filter FORWARD udp sport 1024-65535 counter ebtables-translate -A FORWARD --ip-proto 253 nft add rule bridge filter FORWARD ip protocol 253 counter + +ebtables-translate -A FORWARD --ip-icmp-type "echo-request" +nft add rule bridge filter FORWARD ip icmp type 8 counter + +ebtables-translate -A FORWARD --ip-icmp-type 1/1 +nft add rule bridge filter FORWARD ip icmp type 1 ip icmp code 1 counter + +ebtables-translate -A FORWARD --ip-icmp-type ! 1:10 +nft add rule bridge filter FORWARD ip icmp type != 1-10 counter -- cgit v1.2.3