diff options
| author | Laura Garcia Liebana <nevola@gmail.com> | 2016-06-02 19:29:26 +0200 |
|---|---|---|
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2016-06-06 13:28:16 +0200 |
| commit | 8dbc8b37bd6f44841dab72df43b09c082b01f462 (patch) | |
| tree | a9d64f8d6d603d753df354a4c10c2a4308f52fe9 /extensions/libxt_connlimit.c | |
| parent | 76c303ac8895b19e53aae37ae2cfa94d8e782554 (diff) | |
extensions: libxt_multiport: Add translation to nft
Add translation for multiport to nftables, which it's supported natively.
Examples:
$ sudo iptables-translate -t filter -A INPUT -p tcp -m multiport --dports 80,81 -j ACCEPT
nft add rule ip filter INPUT ip protocol tcp tcp dport { 80,81} counter accept
$ sudo iptables-translate -t filter -A INPUT -p tcp -m multiport --dports 80:88 -j ACCEPT
nft add rule ip filter INPUT ip protocol tcp tcp dport 80-88 counter accept
$ sudo iptables-translate -t filter -A INPUT -p tcp -m multiport ! --dports 80:88 -j ACCEPT
nft add rule ip filter INPUT ip protocol tcp tcp dport != 80-88 counter accept
Signed-off-by: Laura Garcia Liebana <nevola@gmail.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'extensions/libxt_connlimit.c')
0 files changed, 0 insertions, 0 deletions