summaryrefslogtreecommitdiffstats
path: root/extensions/libxt_set.c
diff options
context:
space:
mode:
authorLiping Zhang <liping.zhang@spreadtrum.com>2016-10-07 19:08:53 +0800
committerPablo Neira Ayuso <pablo@netfilter.org>2016-10-14 18:59:35 +0200
commit82dc0ce50d2f48369f6e738f165f9187012d5a82 (patch)
tree2e45fa139bfb2845abaed02fa15b95145173d272 /extensions/libxt_set.c
parentcd33256280d085834bd0fe674afc446364143d3c (diff)
extensions: libxt_ipcomp: add range support in translation
When translate to nft rules, ipcompspi range is not supported, so: # iptables-translate -A OUTPUT -m ipcomp --ipcompspi 1:2 nft add rule ip filter OUTPUT comp cpi 1 counter # iptables-translate -A OUTPUT -m ipcomp ! --ipcompspi 3:30 nft add rule ip filter OUTPUT comp cpi != 3 counter Apply this patch: # iptables-translate -A OUTPUT -m ipcomp --ipcompspi 1:2 nft add rule ip filter OUTPUT comp cpi 1-2 counter # iptables-translate -A OUTPUT -m ipcomp ! --ipcompspi 3:30 nft add rule ip filter OUTPUT comp cpi != 3-30 counter Signed-off-by: Liping Zhang <liping.zhang@spreadtrum.com> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'extensions/libxt_set.c')
0 files changed, 0 insertions, 0 deletions