summaryrefslogtreecommitdiffstats
path: root/extensions/libxt_cgroup.txlate
blob: 6e3aab7647aa7fe90d665802911315999085bec1 (plain)
1
2
3
4
5
iptables-translate -t filter -A INPUT -m cgroup --cgroup 0 -j ACCEPT
nft 'add rule ip filter INPUT meta cgroup 0 counter accept'

iptables-translate -t filter -A INPUT -m cgroup ! --cgroup 0 -j ACCEPT
nft 'add rule ip filter INPUT meta cgroup != 0 counter accept'