summaryrefslogtreecommitdiffstats
path: root/extensions/libebt_ip.txlate
diff options
context:
space:
mode:
authorFlorian Westphal <fw@strlen.de>2018-04-18 00:09:05 +0200
committerFlorian Westphal <fw@strlen.de>2018-04-19 10:18:18 +0200
commitf38ed1e59f8d3b62e322563401cabc6dbac5fca5 (patch)
treecfeca465d8c624b0c2361e10703796d5e4967138 /extensions/libebt_ip.txlate
parent71a6e372f82b6c50c14c8034a974f3ad5983314d (diff)
xt-translate: quote interface names in translated output
it its good practice as interface names can be virtually any identifier and could clash with nft keywords. Signed-off-by: Florian Westphal <fw@strlen.de>
Diffstat (limited to 'extensions/libebt_ip.txlate')
-rw-r--r--extensions/libebt_ip.txlate2
1 files changed, 1 insertions, 1 deletions
diff --git a/extensions/libebt_ip.txlate b/extensions/libebt_ip.txlate
index 7f08f71d..4d31a700 100644
--- a/extensions/libebt_ip.txlate
+++ b/extensions/libebt_ip.txlate
@@ -5,7 +5,7 @@ ebtables-translate -I FORWARD --ip-dst 10.0.0.1
nft insert rule bridge filter FORWARD ip daddr 10.0.0.1 counter
ebtables-translate -I OUTPUT 3 -o eth0 --ip-tos 0xff
-nft insert rule bridge filter OUTPUT position 3 ip dscp 0xFC counter
+nft insert rule bridge filter OUTPUT oifname "eth0" ip dscp 0xFC counter
ebtables-translate -A FORWARD --ip-proto tcp --ip-dport 22
nft add rule bridge filter FORWARD tcp dport 22 counter