nftables - nft command line tool

	Commit message (Collapse)	Author	Age	Files	Lines
*	evaluate: expand variable containing set into multiple mappings	Pablo Neira Ayuso	2021-08-12	1	-0/+17
	# cat x.nft define interfaces = { eth0, eth1 } table ip x { chain y { type filter hook input priority 0; policy accept; iifname vmap { lo : accept, $interfaces : drop } } } # nft -f x.nft # nft list ruleset table ip x { chain y { type filter hook input priority 0; policy accept; iifname vmap { "lo" : accept, "eth0" : drop, "eth1" : drop } } } Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>