path: root/iptables/nft.h
diff options
authorPablo M. Bermudo Garay <>2016-08-26 18:58:43 +0200
committerPablo Neira Ayuso <>2016-08-26 19:35:33 +0200
commit4b791044cd0984c9a1771e86fa77fce9d309d9e7 (patch)
treeab14cc4444f772d76b8d1de7f712a5a32168e51b /iptables/nft.h
parent27579fe10473c475f3e4dcf66c862f3a69995ea7 (diff)
xtables-compat: check if nft ruleset is compatible
This patch adds a verification of the compatibility between the nft ruleset and iptables. Nft tables, chains and rules are checked to be compatible with iptables. If something is not compatible, the execution stops and an error message is displayed to the user. This checking is triggered by xtables-compat -L and xtables-compat-save commands. Signed-off-by: Pablo M. Bermudo Garay <> Signed-off-by: Pablo Neira Ayuso <>
Diffstat (limited to 'iptables/nft.h')
1 files changed, 2 insertions, 0 deletions
diff --git a/iptables/nft.h b/iptables/nft.h
index bcabf42b..f5449db4 100644
--- a/iptables/nft.h
+++ b/iptables/nft.h
@@ -181,4 +181,6 @@ int nft_arp_rule_insert(struct nft_handle *h, const char *chain,
void nft_rule_to_arpt_entry(struct nftnl_rule *r, struct arpt_entry *fw);
+int nft_is_ruleset_compatible(struct nft_handle *h);