summaryrefslogtreecommitdiffstats
path: root/files/examples/ipv4-filter.nft
diff options
context:
space:
mode:
authorArturo Borrero Gonzalez <arturo@netfilter.org>2018-02-24 22:06:19 +0100
committerPablo Neira Ayuso <pablo@netfilter.org>2018-02-25 19:50:23 +0100
commit6c9230e79339ca4fd662855c84529fa92e962ca5 (patch)
tree9d34224c6e5a8799edde4a5a7fa20517b7ee630f /files/examples/ipv4-filter.nft
parent4d6ad0f310d6cc3a1d776d32d9d7d678017c6dd7 (diff)
nftables: rearrange files and examples
Concatenate all family/hook examples into a single one by means of includes. Put all example files under examples/. Use the '.nft' prefix and mark them as executable files. Use a static shebang declaration, since these are examples meant for final systems and users. While at it, refresh also the sets_and_maps.nft example file and also add the 'netdev-ingress.nft' example file. Signed-off-by: Arturo Borrero Gonzalez <arturo@netfilter.org> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'files/examples/ipv4-filter.nft')
-rwxr-xr-xfiles/examples/ipv4-filter.nft7
1 files changed, 7 insertions, 0 deletions
diff --git a/files/examples/ipv4-filter.nft b/files/examples/ipv4-filter.nft
new file mode 100755
index 00000000..73b11bc9
--- /dev/null
+++ b/files/examples/ipv4-filter.nft
@@ -0,0 +1,7 @@
+#!/usr/sbin/nft -f
+
+table filter {
+ chain input { type filter hook input priority 0; }
+ chain forward { type filter hook forward priority 0; }
+ chain output { type filter hook output priority 0; }
+}