diff options
Diffstat (limited to 'iptables/xtables-translate.8')
| -rw-r--r-- | iptables/xtables-translate.8 | 16 |
1 files changed, 8 insertions, 8 deletions
diff --git a/iptables/xtables-translate.8 b/iptables/xtables-translate.8 index fe127887..6fbbd617 100644 --- a/iptables/xtables-translate.8 +++ b/iptables/xtables-translate.8 @@ -73,18 +73,18 @@ Basic operation examples. Single command translation: .nf -root@machine:\~# iptables\-translate \-A INPUT \-p tcp \-\-dport 22 \-m conntrack \-\-ctstate NEW \-j ACCEPT +root@machine:\(ti# iptables\-translate \-A INPUT \-p tcp \-\-dport 22 \-m conntrack \-\-ctstate NEW \-j ACCEPT nft add rule ip filter INPUT tcp dport 22 ct state new counter accept -root@machine:\~# ip6tables\-translate \-A FORWARD \-i eth0 \-o eth3 \-p udp \-m multiport \-\-dports 111,222 \-j ACCEPT +root@machine:\(ti# ip6tables\-translate \-A FORWARD \-i eth0 \-o eth3 \-p udp \-m multiport \-\-dports 111,222 \-j ACCEPT nft add rule ip6 filter FORWARD iifname eth0 oifname eth3 meta l4proto udp udp dport { 111,222} counter accept .fi Whole ruleset translation: .nf -root@machine:\~# iptables\-save > save.txt -root@machine:\~# cat save.txt +root@machine:\(ti# iptables\-save > save.txt +root@machine:\(ti# cat save.txt # Generated by iptables\-save v1.6.0 on Sat Dec 24 14:26:40 2016 *filter :INPUT ACCEPT [5166:1752111] @@ -94,7 +94,7 @@ root@machine:\~# cat save.txt COMMIT # Completed on Sat Dec 24 14:26:40 2016 -root@machine:\~# iptables\-restore\-translate \-f save.txt +root@machine:\(ti# iptables\-restore\-translate \-f save.txt # Translated by iptables\-restore\-translate v1.6.0 on Sat Dec 24 14:26:59 2016 add table ip filter add chain ip filter INPUT { type filter hook input priority 0; } @@ -102,9 +102,9 @@ add chain ip filter FORWARD { type filter hook forward priority 0; } add chain ip filter OUTPUT { type filter hook output priority 0; } add rule ip filter FORWARD tcp dport 22 ct state new counter accept -root@machine:\~# iptables\-restore\-translate \-f save.txt > ruleset.nft -root@machine:\~# nft \-f ruleset.nft -root@machine:\~# nft list ruleset +root@machine:\(ti# iptables\-restore\-translate \-f save.txt > ruleset.nft +root@machine:\(ti# nft \-f ruleset.nft +root@machine:\(ti# nft list ruleset table ip filter { chain INPUT { type filter hook input priority 0; policy accept; |