From e67c08880961f64984b396d6e8ad6bad04546253 Mon Sep 17 00:00:00 2001 From: Florian Westphal Date: Fri, 13 Apr 2018 17:40:56 +0200 Subject: ebtables-translate: add initial test cases Signed-off-by: Florian Westphal --- extensions/libebt_ip.txlate | 17 +++++++++++++++++ 1 file changed, 17 insertions(+) create mode 100644 extensions/libebt_ip.txlate (limited to 'extensions/libebt_ip.txlate') diff --git a/extensions/libebt_ip.txlate b/extensions/libebt_ip.txlate new file mode 100644 index 00000000..7f08f71d --- /dev/null +++ b/extensions/libebt_ip.txlate @@ -0,0 +1,17 @@ +ebtables-translate -A FORWARD --ip-src ! 192.168.0.0/24 -j ACCEPT +nft add rule bridge filter FORWARD ip saddr != 192.168.0.0/24 counter accept + +ebtables-translate -I FORWARD --ip-dst 10.0.0.1 +nft insert rule bridge filter FORWARD ip daddr 10.0.0.1 counter + +ebtables-translate -I OUTPUT 3 -o eth0 --ip-tos 0xff +nft insert rule bridge filter OUTPUT position 3 ip dscp 0xFC counter + +ebtables-translate -A FORWARD --ip-proto tcp --ip-dport 22 +nft add rule bridge filter FORWARD tcp dport 22 counter + +ebtables-translate -A FORWARD --ip-proto udp --ip-sport 1024:65535 +nft add rule bridge filter FORWARD udp sport 1024-65535 counter + +ebtables-translate -A FORWARD --ip-proto 253 +nft add rule bridge filter FORWARD ip protocol 253 counter -- cgit v1.2.3