Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | evaluate: expand variable containing set into multiple mappings | Pablo Neira Ayuso | 2021-08-12 | 1 | -0/+12 |
# cat x.nft define interfaces = { eth0, eth1 } table ip x { chain y { type filter hook input priority 0; policy accept; iifname vmap { lo : accept, $interfaces : drop } } } # nft -f x.nft # nft list ruleset table ip x { chain y { type filter hook input priority 0; policy accept; iifname vmap { "lo" : accept, "eth0" : drop, "eth1" : drop } } } Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org> |