blob: ddcc8beb1e865651a9abbc83e17f71be6bddb370 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
|
<rule>
<family>ip</family>
<table>filter</table>
<chain>output</chain>
<handle>36</handle>
<flags>0</flags>
<expr type="payload">
<dreg>1</dreg>
<offset>16</offset>
<len>4</len>
<base>network</base>
</expr>
<expr type="lookup">
<set>map2</set>
<sreg>1</sreg>
<dreg>0</dreg>
</expr>
</rule>
<!-- nft add rule ip filter output ip daddr vmap { 192.168.1.1 => accept, 192.168.1.2 => drop, } -->
|