nftables - nft command line tool

	Commit message (Collapse)	Author	Age	Files	Lines
*	meta: add slave device matching	Florian Westphal	2020-01-03	1	-0/+12
\| \| \| \| \| \| \| \|	Adds "meta sdif" and "meta sdifname". Both only work in input/forward hook of ipv4/ipv6/inet family. Cc: Martin Willi <martin@strongswan.org> Signed-off-by: Florian Westphal <fw@strlen.de>
*	proto: permit icmp-in-ipv6 and icmpv6-in-ipv4	Florian Westphal	2018-03-28	1	-0/+34
	Jozsef points out that meta l4proto icmp icmp type destination-unreachable is hard to read. So, lets just add icmp/icmpv6 to ip/ip6 protocol base so users can just go with icmp type destination-unreachable and let nft fill in needed dependency. After this patch, the recent patch to not remove the dependency can be reverted again. Suggested-by: Pablo Neira Ayuso <pablo@netfilter.org> Signed-off-by: Florian Westphal <fw@strlen.de>