Hi Pablo, I reworked the patchset. The basic operations (-A/-I/-L/-D) are working, see the examples below: ebtables-compat -A INPUT -i eth0 -j ACCEPT ebtables-compat -A INPUT -p arp -s 11:22:33:44:55:66 -j ACCEPT ebtables-compat -A INPUT -p arp -d 11:22:33:44:55:66 -j ACCEPT ebtables-compat -L --Ln Chain INPUT (policy ACCEPT) num target prot opt source destination 1 -i eth0 -j ACCEPT 2 -p ARP -s 11:22:33:44:55:66/0:0:0:0:0:0 -j ACCEPT 3 -p ARP -d 11:22:33:44:55:66/0:0:0:0:0:0 -j ACCEPT ebtables-compat -D INPUT 2:3 Chain INPUT (policy ACCEPT) num target prot opt source destination 1 -i eth0 -j ACCEPT As you can see, a minor issue have to be fixed when printing rules. I have no idea how to handle --logical-in/out interfaces currently, so please let me know if you have an idea or an advice. Giuseppe Longo (3): xtables: bootstrap xtables-eb for nftables Operations for bridge family nft-shared: make compare_matches as public include/linux/netfilter_bridge.h | 33 + include/linux/netfilter_bridge/ebtables.h | 276 +++++++ include/linux/netfilter_bridge/ethernetdb.h | 58 ++ iptables/Makefile.am | 4 +- iptables/getethertype.c | 161 ++++ iptables/nft-bridge.c | 439 ++++++++++ iptables/nft-shared.c | 7 +- iptables/nft-shared.h | 1 + iptables/nft.c | 28 + iptables/nft.h | 12 + iptables/xtables-compat-multi.c | 1 + iptables/xtables-eb-standalone.c | 87 ++ iptables/xtables-eb.c | 1164 +++++++++++++++++++++++++++ iptables/xtables-ebtables.h | 49 ++ iptables/xtables-multi.c | 1 + iptables/xtables-multi.h | 1 + 16 files changed, 2319 insertions(+), 3 deletions(-) create mode 100644 include/linux/netfilter_bridge.h create mode 100644 include/linux/netfilter_bridge/ebtables.h create mode 100644 include/linux/netfilter_bridge/ethernetdb.h create mode 100644 iptables/getethertype.c create mode 100644 iptables/nft-bridge.c create mode 100644 iptables/xtables-eb-standalone.c create mode 100644 iptables/xtables-eb.c create mode 100644 iptables/xtables-ebtables.h -- 1.8.3.2 -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
