On Wed, Apr 16, 2014 at 09:19:40AM +0200, Ana Rey wrote: > Some examples: > > $ sudo iptables-translate -A INPUT -p udp -i eth0 --sport 53 -j ACCEPT > add rule ip filter INPUT iifname eth0 udp sport 53 counter accept > > $ sudo ./iptables-translate -A OUTPUT -p udp -o eth0 --dport 53:66 -j DROP > add rule ip filter OUTPUT oifname eth0 udp dport 53-66 counter drop > > $ sudo ./iptables-translate -I OUTPUT -p udp -d 8.8.8.8 -j ACCEPT > nft insert rule ip filter OUTPUT ip protocol udp ip daddr 8.8.8.8 counter accept Applied to the xlate branch of iptables, will merge that branch into master once we get a significant amount of iptables to nft translations. Thanks Ana. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
