summaryrefslogtreecommitdiffstats
path: root/extensions/libip6t_mh.txlate
blob: 3364ce574468f36fc1600d2742edd49431bc6f22 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
ip6tables-translate -A INPUT -p mh --mh-type 1 -j ACCEPT
nft 'add rule ip6 filter INPUT meta l4proto mobility-header mh type 1 counter accept'

ip6tables-translate -A INPUT -p mh --mh-type 1:3 -j ACCEPT
nft 'add rule ip6 filter INPUT meta l4proto mobility-header mh type 1-3 counter accept'

ip6tables-translate -A INPUT -p mh --mh-type 0:255 -j ACCEPT
nft 'add rule ip6 filter INPUT meta l4proto mobility-header counter accept'

ip6tables-translate -A INPUT -m mh --mh-type 0:255 -j ACCEPT
nft 'add rule ip6 filter INPUT exthdr mh exists counter accept'

ip6tables-translate -A INPUT -p mh ! --mh-type 0:255 -j ACCEPT
nft 'add rule ip6 filter INPUT meta l4proto mobility-header mh type != 0-255 counter accept'