summaryrefslogtreecommitdiffstats
path: root/extensions/libxt_policy.txlate
diff options
context:
space:
mode:
Diffstat (limited to 'extensions/libxt_policy.txlate')
-rw-r--r--extensions/libxt_policy.txlate5
1 files changed, 5 insertions, 0 deletions
diff --git a/extensions/libxt_policy.txlate b/extensions/libxt_policy.txlate
new file mode 100644
index 00000000..66788a76
--- /dev/null
+++ b/extensions/libxt_policy.txlate
@@ -0,0 +1,5 @@
+iptables-translate -A INPUT -m policy --pol ipsec --dir in
+nft add rule ip filter INPUT meta secpath exists counter
+
+iptables-translate -A INPUT -m policy --pol none --dir in
+nft add rule ip filter INPUT meta secpath missing counter