blob: f3dc9a347972316e1f334e8af145f54daf4e773d (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
|
#!/bin/bash
RULESET='
table inet test {
set test {
type ipv4_addr
elements = { 1.1.1.1}
}
chain test {
ip saddr @test counter accept
ip daddr { 2.2.2.2} counter accept
}
}'
set -e
$NFT -f - <<< "$RULESET"
TMP=$(mktemp)
echo "$RULESET" >> "$TMP"
$NFT "flush ruleset;include \"$TMP\""
rm -f "$TMP"
rule_handle=$($NFT list ruleset -a | awk '/saddr/{print $NF}')
$NFT delete rule inet test test handle $rule_handle
$NFT delete set inet test test
$NFT -f - <<< "$RULESET"
|
