summaryrefslogtreecommitdiffstats
path: root/INCOMPATIBILITIES
diff options
context:
space:
mode:
authorLiping Zhang <liping.zhang@spreadtrum.com>2016-07-30 13:20:59 +0800
committerPablo Neira Ayuso <pablo@netfilter.org>2016-08-01 14:21:27 +0200
commit0ddd663e9c167f9f0451dac8c02bbfcda25fe15e (patch)
treecf45f737d411decb39d13c4bec30a3872a94f7f9 /INCOMPATIBILITIES
parent68c57e809f69108694cce2d502a3ed1c328d13e8 (diff)
iptables-translate: add in/out ifname wildcard match translation to nft
In iptables, "-i eth+" means match all in ifname with the prefix "eth". But in nftables, this was changed to "iifname eth*". So we should handle this subtle difference. Apply this patch, translation will become: # iptables-translate -A INPUT -i eth+ nft add rule ip filter INPUT iifname eth* counter # ip6tables-translate -A OUTPUT ! -o eth+ nft add rule ip6 filter OUTPUT oifname != eth* counter Signed-off-by: Liping Zhang <liping.zhang@spreadtrum.com> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'INCOMPATIBILITIES')
0 files changed, 0 insertions, 0 deletions