summaryrefslogtreecommitdiffstats
path: root/extensions/libxt_standard.t
Commit message (Collapse)AuthorAgeFilesLines
* xtables-translate: Fix translation of odd netmasksPhil Sutter2021-03-091-0/+12
| | | | | | | | | Iptables supports netmasks which are not prefixes to match on (or ignore) arbitrary bits in an address. Yet nftables' prefix notation is available for real prefixes only, so translation is not as trivial - print bitmask syntax for those cases. Signed-off-by: Phil Sutter <phil@nwl.cc>
* extensions: test protocol and interface negationFlorian Westphal2018-11-121-0/+3
| | | | Signed-off-by: Florian Westphal <fw@strlen.de>
* iptables-nft: fix bogus handling of zero saddr/daddrFlorian Westphal2018-11-031-0/+4
| | | | | | | | | | | | | rule for 0.0.0.0/8 is added as 0.0.0.0/0, because we did not check mask (or negation, for that matter). Fix this and add test cases too. This also revealed an ip6tables-nft-save bug, it would print ' !-d', not '! -d'. Closes: https://bugzilla.netfilter.org/show_bug.cgi?id=1287 Signed-off-by: Florian Westphal <fw@strlen.de>
* extensions: libxt_standard: add unit testPablo Neira Ayuso2013-10-071-0/+4
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>