On Mon, Jan 04, 2016 at 11:12:55PM +0530, Shivani Bhardwaj wrote:
> On Mon, Jan 4, 2016 at 11:10 PM, Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx> wrote:
> > On Mon, Jan 04, 2016 at 10:49:10PM +0530, Shivani Bhardwaj wrote:
> >> This patchset adds ttl translation to nftables by adding ip ttl to
> >> the buffer everytime a ttl match is hit as it is necessary to mention
> >> the protocol version with ttl, that is,
> >> $ sudo nft .. ttl 3 .. won't work but
> >> $ sudo nft .. ip ttl 3 .. would work.
> >
> > This above is the right syntax.
> >
> >> Also, since adding ip to the buffer in the code for ttl won't look
> >> suitable, some amendments have been done in the nft-ipv4 code.
> >>
> >> Shivani Bhardwaj (2):
> >> iptables: nft-ipv4: Add ip ttl to the buffer
> >
> > I don't think you need this change for nft-ipv4.
>
> Hi Pablo,
>
> Should I be doing xt_buf_add("ip ttl") in the code for ttl?
Yes, that should be fine.
--
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
