diff options
| author | Shivani Bhardwaj <shivanib134@gmail.com> | 2016-03-04 03:31:45 +0530 |
|---|---|---|
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2016-03-07 17:52:16 +0100 |
| commit | c94a99872414327426718bd56958bb438424fd83 (patch) | |
| tree | ad180868a1330d5433aca2d9db4148abc3e3552a /extensions/libxt_helper.c | |
| parent | defc7bd2bac89aab8f12929f264241e4583ec21c (diff) | |
extensions: libxt_dccp: Add translation to nft
Add translation for dccp to nftables.
Full translation of this match awaits the support for --dccp-option.
Examples:
$ sudo iptables-translate -A INPUT -p dccp -m dccp --sport 100
nft add rule ip filter INPUT dccp sport 100 counter
$ sudo iptables-translate -A INPUT -p dccp -m dccp --dport 100:200
nft add rule ip filter INPUT dccp dport 100-200 counter
$ sudo iptables-translate -A INPUT -p dccp -m dccp ! --dport 100
nft add rule ip filter INPUT dccp dport != 100 counter
$ sudo iptables-translate -A INPUT -p dccp -m dccp --dport 100 --dccp-types REQUEST,RESPONSE,DATA,ACK,DATAACK,CLOSEREQ,CLOSE,SYNC,SYNCACK
nft add rule ip filter INPUT dccp dport 100 dccp type {request, response, data, ack, dataack, closereq, close, sync, syncack} counter
Signed-off-by: Shivani Bhardwaj <shivanib134@gmail.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'extensions/libxt_helper.c')
0 files changed, 0 insertions, 0 deletions