summaryrefslogtreecommitdiffstats
path: root/iptables
diff options
context:
space:
mode:
authorPhil Sutter <phil@nwl.cc>2017-03-08 02:06:14 +0100
committerPablo Neira Ayuso <pablo@netfilter.org>2017-03-08 10:50:15 +0100
commit9f972f4523339df45f0ae9409a3c897998f82fcc (patch)
tree2f86a1369ddd6475dd5371fc0df6b3e4f06a82a1 /iptables
parent2c8e251ef83d0b8d0145c2cebd77edec538f1c85 (diff)
extensions: libxt_addrtype: Add translation to nft
Translate addrtype match into fib expression: $ iptables-translate -A INPUT -m addrtype --src-type LOCAL nft add rule ip filter INPUT fib saddr type local counter $ iptables-translate -A INPUT -m addrtype --dst-type LOCAL nft add rule ip filter INPUT fib daddr type local counter $ iptables-translate -A INPUT -m addrtype ! --dst-type ANYCAST,LOCAL nft add rule ip filter INPUT fib daddr type != { local, anycast } counter $ iptables-translate -A INPUT -m addrtype --limit-iface-in --dst-type ANYCAST,LOCAL nft add rule ip filter INPUT fib daddr . iif type { local, anycast } counter Signed-off-by: Phil Sutter <phil@nwl.cc> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'iptables')
0 files changed, 0 insertions, 0 deletions