diff options
| author | Laura Garcia Liebana <nevola@gmail.com> | 2016-06-01 00:06:59 +0200 |
|---|---|---|
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2016-06-01 17:10:54 +0200 |
| commit | ddc76d5205836e60db556362a111102e7a1ff001 (patch) | |
| tree | bb8b4867c291ec82119778f84bfa5ca6d137fdb5 /extensions/libxt_connmark.c | |
| parent | 8548dd253833027c68ac6400c3118ef788fabe5d (diff) | |
extensions: libxt_ipcomp: Add translation to nft
Add translation of ipcomp to nftables.
First value of the parameter 'ipcompspi' will be translated to 'cpi'
parameter in nftables. Parameter 'compres' is not supported in nftables.
Examples:
$ sudo iptables-translate -t filter -A INPUT -m ipcomp --ipcompspi 0x12 -j ACCEPT
nft add rule ip filter INPUT comp cpi 18 counter accept
$ sudo iptables-translate -t filter -A INPUT -m ipcomp ! --ipcompspi 0x12 -j ACCEPT
nft add rule ip filter INPUT comp cpi != 18 counter accept
Signed-off-by: Laura Garcia Liebana <nevola@gmail.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'extensions/libxt_connmark.c')
0 files changed, 0 insertions, 0 deletions