blob: f7a2ef27274a3e201896da3252df2ab88b39adb3 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
|
# meta nfproto ipv4 ct original saddr 1.2.3.4
ip test-ip4 output
[ meta load nfproto => reg 1 ]
[ cmp eq reg 1 0x00000002 ]
[ ct load src => reg 1 , dir original ]
[ cmp eq reg 1 0x04030201 ]
# ct original ip6 saddr ::1
inet test-inet input
[ ct load src_ip6 => reg 1 , dir original ]
[ cmp eq reg 1 0x00000000 0x00000000 0x00000000 0x01000000 ]
# ct original ip daddr 1.2.3.4 accept
inet test-inet input
[ ct load dst_ip => reg 1 , dir original ]
[ cmp eq reg 1 0x04030201 ]
[ immediate reg 0 accept ]
|
