On Sat, Dec 19, 2015 at 12:46:31PM +0530, Shivani Bhardwaj wrote: > Add translation for metainformation mark to nftables. > > Examples: > > $ sudo iptables-translate -I INPUT -m mark --mark 12 > nft insert rule ip filter INPUT mark & xc counter > > $ sudo iptables-translate -A FORWARD -m mark --mark 22 -j ACCEPT > nft add rule ip filter FORWARD mark & x16 counter accept > > $ sudo iptables-translate -t mangle -A PREROUTING -p tcp --dport 46000 -m mark --mark 0x40 > nft add rule ip mangle PREROUTING tcp dport 46000 mark & x40 counter > > $ sudo iptables-translate -A FORWARD -m mark -k 0x400/0x400 -j ACCEPT > nft add rule ip filter FORWARD mark & x400 == x400 counter accept Much better, getting closer, but still these translations are not correct, please fix them and respin, thanks. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
