blob: e3da7825cb7bfd482cd28f3cd24c4d25d90d7180 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
|
#!/bin/bash
EXPECTED="table ip x {
map y {
typeof ip saddr . @ih,32,32: verdict
elements = { 1.1.1.1 . 0x14 : accept, 2.2.2.2 . 0x1e : drop }
}
chain y {
ip saddr . @ih,32,32 vmap @y
ip saddr . @ih,32,32 vmap { 4.4.4.4 . 0x34 : accept, 5.5.5.5 . 0x45 : drop}
}
}"
set -e
$NFT -f - <<< $EXPECTED
$NFT add element ip x y { 7.7.7.7 . 0x86 : accept, 7.7.7.8 . 0x97 : drop }
$NFT delete element ip x y { 2.2.2.2 . 0x1e : drop }
|