{ "nftables": [ { "metainfo": { "version": "VERSION", "release_name": "RELEASE_NAME", "json_schema_version": 1 } }, { "table": { "family": "ip", "name": "t", "handle": 0 } }, { "chain": { "family": "ip", "table": "t", "name": "c", "handle": 0, "type": "filter", "hook": "input", "prio": 0, "policy": "accept" } }, { "set": { "family": "ip", "name": "s", "table": "t", "type": [ "ipv4_addr", "iface_index" ], "handle": 0, "flags": [ "interval" ], "elem": [ { "concat": [ "127.0.0.1", "lo" ] }, { "concat": [ "127.0.0.2", "lo" ] } ] } }, { "set": { "family": "ip", "name": "s2", "table": "t", "type": [ "ipv4_addr", "iface_index" ], "handle": 0, "elem": [ { "concat": [ "127.0.0.1", "lo" ] }, { "concat": [ "127.0.0.2", "lo" ] } ] } }, { "set": { "family": "ip", "name": "s3", "table": "t", "type": "iface_index", "handle": 0, "elem": [ "lo" ] } }, { "set": { "family": "ip", "name": "s4", "table": "t", "type": "iface_index", "handle": 0, "flags": [ "interval" ], "elem": [ "lo" ] } }, { "set": { "family": "ip", "name": "nomatch", "table": "t", "type": [ "ipv4_addr", "iface_index" ], "handle": 0, "elem": [ { "concat": [ "127.0.0.3", "lo" ] } ] } }, { "set": { "family": "ip", "name": "nomatch2", "table": "t", "type": [ "ipv4_addr", "iface_index" ], "handle": 0, "elem": [ { "concat": [ "127.0.0.2", "90000" ] } ] } }, { "rule": { "family": "ip", "table": "t", "chain": "c", "handle": 0, "expr": [ { "match": { "op": "==", "left": { "payload": { "protocol": "icmp", "field": "type" } }, "right": "echo-request" } }, { "match": { "op": "==", "left": { "concat": [ { "payload": { "protocol": "ip", "field": "saddr" } }, { "meta": { "key": "iif" } } ] }, "right": "@s" } }, { "counter": { "packets": 1, "bytes": 84 } } ] } }, { "rule": { "family": "ip", "table": "t", "chain": "c", "handle": 0, "expr": [ { "match": { "op": "==", "left": { "payload": { "protocol": "icmp", "field": "type" } }, "right": "echo-request" } }, { "match": { "op": "==", "left": { "concat": [ { "payload": { "protocol": "ip", "field": "saddr" } }, "lo" ] }, "right": "@s" } }, { "counter": { "packets": 1, "bytes": 84 } } ] } }, { "rule": { "family": "ip", "table": "t", "chain": "c", "handle": 0, "expr": [ { "match": { "op": "==", "left": { "payload": { "protocol": "icmp", "field": "type" } }, "right": "echo-request" } }, { "match": { "op": "==", "left": { "concat": [ { "payload": { "protocol": "ip", "field": "saddr" } }, "lo" ] }, "right": "@s" } }, { "counter": { "packets": 1, "bytes": 84 } } ] } }, { "rule": { "family": "ip", "table": "t", "chain": "c", "handle": 0, "expr": [ { "match": { "op": "==", "left": { "payload": { "protocol": "icmp", "field": "type" } }, "right": "echo-request" } }, { "match": { "op": "==", "left": { "concat": [ { "payload": { "protocol": "ip", "field": "saddr" } }, { "meta": { "key": "iif" } } ] }, "right": "@s2" } }, { "counter": { "packets": 1, "bytes": 84 } } ] } }, { "rule": { "family": "ip", "table": "t", "chain": "c", "handle": 0, "expr": [ { "match": { "op": "==", "left": { "payload": { "protocol": "icmp", "field": "type" } }, "right": "echo-request" } }, { "match": { "op": "==", "left": { "concat": [ { "payload": { "protocol": "ip", "field": "saddr" } }, "lo" ] }, "right": "@s2" } }, { "counter": { "packets": 1, "bytes": 84 } } ] } }, { "rule": { "family": "ip", "table": "t", "chain": "c", "handle": 0, "expr": [ { "match": { "op": "==", "left": { "payload": { "protocol": "icmp", "field": "type" } }, "right": "echo-request" } }, { "match": { "op": "==", "left": { "concat": [ { "payload": { "protocol": "ip", "field": "saddr" } }, "lo" ] }, "right": "@s2" } }, { "counter": { "packets": 1, "bytes": 84 } } ] } }, { "rule": { "family": "ip", "table": "t", "chain": "c", "handle": 0, "expr": [ { "match": { "op": "==", "left": { "payload": { "protocol": "icmp", "field": "type" } }, "right": "echo-request" } }, { "match": { "op": "==", "left": { "concat": [ { "payload": { "protocol": "ip", "field": "daddr" } }, "lo" ] }, "right": "@s" } }, { "counter": { "packets": 1, "bytes": 84 } } ] } }, { "rule": { "family": "ip", "table": "t", "chain": "c", "handle": 0, "expr": [ { "match": { "op": "==", "left": { "payload": { "protocol": "icmp", "field": "type" } }, "right": "echo-request" } }, { "match": { "op": "==", "left": { "concat": [ { "payload": { "protocol": "ip", "field": "daddr" } }, "lo" ] }, "right": "@s2" } }, { "counter": { "packets": 1, "bytes": 84 } } ] } }, { "rule": { "family": "ip", "table": "t", "chain": "c", "handle": 0, "expr": [ { "match": { "op": "==", "left": { "payload": { "protocol": "icmp", "field": "type" } }, "right": "echo-request" } }, { "match": { "op": "==", "left": { "meta": { "key": "iif" } }, "right": "@s3" } }, { "counter": { "packets": 1, "bytes": 84 } } ] } }, { "rule": { "family": "ip", "table": "t", "chain": "c", "handle": 0, "expr": [ { "match": { "op": "==", "left": { "payload": { "protocol": "icmp", "field": "type" } }, "right": "echo-request" } }, { "match": { "op": "==", "left": { "meta": { "key": "iif" } }, "right": "@s4" } }, { "counter": { "packets": 1, "bytes": 84 } } ] } }, { "rule": { "family": "ip", "table": "t", "chain": "c", "handle": 0, "expr": [ { "match": { "op": "==", "left": { "concat": [ { "payload": { "protocol": "ip", "field": "daddr" } }, "lo" ] }, "right": "@nomatch" } }, { "counter": { "packets": 0, "bytes": 0 } }, { "drop": null } ] } }, { "rule": { "family": "ip", "table": "t", "chain": "c", "handle": 0, "expr": [ { "match": { "op": "==", "left": { "concat": [ { "payload": { "protocol": "ip", "field": "daddr" } }, { "meta": { "key": "iif" } } ] }, "right": "@nomatch2" } }, { "counter": { "packets": 0, "bytes": 0 } }, { "drop": null } ] } } ] }