diff options
| author | Phil Sutter <phil@nwl.cc> | 2018-08-23 17:43:20 +0200 |
|---|---|---|
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2018-08-24 10:05:51 +0200 |
| commit | 1a878a799013f1644fd7c38709669293d01887f3 (patch) | |
| tree | 2904d431b37f32a202329d75082f59fec06ffcab /extensions/libxt_AUDIT.txlate | |
| parent | 5ee03e6df41727652e0dc6ffaef8411b8840d812 (diff) | |
extensions: AUDIT: Provide translation
With audit logging being supported by nftables as a simple (fake) log
level, translating AUDIT target is easy. Especially since xt_AUDIT in
kernel doesn't quite care about --type parameter.
Signed-off-by: Phil Sutter <phil@nwl.cc>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'extensions/libxt_AUDIT.txlate')
| -rw-r--r-- | extensions/libxt_AUDIT.txlate | 8 |
1 files changed, 8 insertions, 0 deletions
diff --git a/extensions/libxt_AUDIT.txlate b/extensions/libxt_AUDIT.txlate new file mode 100644 index 00000000..abd11eae --- /dev/null +++ b/extensions/libxt_AUDIT.txlate @@ -0,0 +1,8 @@ +iptables-translate -t filter -A INPUT -j AUDIT --type accept +nft add rule ip filter INPUT counter log level audit + +iptables-translate -t filter -A INPUT -j AUDIT --type drop +nft add rule ip filter INPUT counter log level audit + +iptables-translate -t filter -A INPUT -j AUDIT --type reject +nft add rule ip filter INPUT counter log level audit |