diff options
author | Ana Rey <anarey@gmail.com> | 2014-09-02 20:37:17 +0200 |
---|---|---|
committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2014-09-03 14:23:48 +0200 |
commit | d23234b11b76c4d3f2be5f844e6dd2a93bac04fb (patch) | |
tree | 7a67007704f1a569289cd85cc3db534a7d9e562c /src/scanner.l | |
parent | 8fa789fe28af5ea252577efd9ea41e7981d4460c (diff) |
src: Add devgroup support in meta expresion
This adds device group support in meta expresion.
The new attributes of meta are "iffgroup" and "oifgroup"
- iffgroup: Match device group of incoming device.
- oifgroup: Match device group of outcoming device.
Example of use:
nft add rule ip test input meta iifgroup 2 counter
nft add rule ip test output meta oifgroup 2 counter
The kernel and libnftnl support were added in these commits:
netfilter: nf_tables: add devgroup support in meta expresion
src: meta: Add devgroup support to meta expresion
Signed-off-by: Ana Rey <anarey@gmail.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'src/scanner.l')
-rw-r--r-- | src/scanner.l | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/src/scanner.l b/src/scanner.l index b7a00b4f..929dbf6e 100644 --- a/src/scanner.l +++ b/src/scanner.l @@ -417,6 +417,8 @@ addrstring ({macaddr}|{ip4addr}|{ip6addr}) "obriport" { return OBRIPORT; } "pkttype" { return PKTTYPE; } "cpu" { return CPU; } +"iifgroup" { return IIFGROUP; } +"oifgroup" { return OIFGROUP; } "ct" { return CT; } "direction" { return DIRECTION; } |