diff options
| author | Phil Sutter <phil@nwl.cc> | 2017-08-09 13:16:42 +0200 |
|---|---|---|
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2017-08-14 11:32:20 +0200 |
| commit | b99c4d072d9969f7a0dfc539b2b68b517f90af68 (patch) | |
| tree | dadf8b641cc9082d64f4dec210772e2eaf1451e7 /doc | |
| parent | c5c6bf14aa53bd16e66fcd281374faa66b3293f8 (diff) | |
Implement --echo option
When used with add, insert or replace commands, nft tool will print
event notifications just like 'nft monitor' does for the same commands.
Apart from seeing what a given command will turn out in the rule set,
this allows to reliably retrieve a new rule's assigned handle (if used
together with --handle option).
Here are some examples of how it works:
| # nft --echo --handle add table ip t
| add table ip t
|
| # nft --echo --handle add chain ip t c \
| '{ type filter hook forward priority 0; }'
| add chain ip t c { type filter hook forward priority 0; policy accept; }
|
| # nft --echo --handle add rule ip t c tcp dport '{22, 80}' accept
| add rule ip t c tcp dport { ssh, http } accept # handle 2
|
| # nft --echo --handle add set ip t ipset '{ type ipv4_addr; \
| elements = { 192.168.0.1, 192.168.0.2 }; }'
| add set ip t ipset { type ipv4_addr; }
| add element ip t ipset { 192.168.0.1 }
| add element ip t ipset { 192.168.0.2 }
Signed-off-by: Phil Sutter <phil@nwl.cc>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'doc')
| -rw-r--r-- | doc/nft.xml | 10 |
1 files changed, 10 insertions, 0 deletions
diff --git a/doc/nft.xml b/doc/nft.xml index 4d03a3db..6c845013 100644 --- a/doc/nft.xml +++ b/doc/nft.xml @@ -157,6 +157,16 @@ vi:ts=4 sw=4 </listitem> </varlistentry> <varlistentry> + <term><option>-e, --echo</option></term> + <listitem> + <para> + When inserting items into the ruleset using <command>add</command>, + <command>insert</command> or <command>replace</command> commands, + print notifications just like <command>nft monitor</command>. + </para> + </listitem> + </varlistentry> + <varlistentry> <term><option>-I, --includepath <replaceable>directory</replaceable></option></term> <listitem> <para> |