On 16.06, Pablo Neira Ayuso wrote:
> This patch adds support for the new 'netdev' table. So far, this table allows
> you to create filter chains from ingress.
>
> The following example shows a very simple base configuration with one table that
> contains a basechain that is attached to the 'eth0':
>
> # nft list table netdev filter
> table netdev filter {
> chain eth0-ingress {
> type filter hook ingress priority 0; device eth0; policy accept;
Just a minor thing, but my idea was rather
type filter hook ingress device eth0 priority 0;
IOW really have the device be part of the hook specification, not just a
chain property, since it really is just that.
--
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
