Re: [PATCH] iptables: extensions: libxt_MARK: Add translation to nft

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Tue, Jun 14, 2016 at 07:12:22PM +0200, rodanber@xxxxxxxxx wrote:
> From: Roberto García <rodanber@xxxxxxxxx>
> 
> Add translation for the MARK target to nftables.
> 
> Examples:
> 
> $ sudo iptables-translate -t mangle -A OUTPUT -j MARK --set-mark 64
> 
> nft add rule ip mangle OUTPUT counter meta mark set 0x40
> 
> $ sudo iptables-translate -t mangle -A OUTPUT -j MARK --set-xmark 0x40/0x32
> 
> nft add rule ip mangle OUTPUT counter meta mark set mark xor 0x40 and 0x32
> 
> $ sudo iptables-translate -t mangle -A OUTPUT -j MARK --or-mark 64
> 
> nft add rule ip mangle OUTPUT counter meta mark set mark or 0x40
> 
> $ sudo iptables-translate -t mangle -A OUTPUT -j MARK --and-mark 64
> 
> nft add rule ip mangle OUTPUT counter meta mark set mark and 0x40
> 
> $ sudo iptables-translate -t mangle -A OUTPUT -j MARK --xor-mark 64
> 
> nft add rule ip mangle OUTPUT counter meta mark set mark xor 0x40

This one applies. Applied, thanks :)
--
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html



[Index of Archives]     [Netfitler Users]     [LARTC]     [Bugtraq]     [Yosemite Forum]

  Powered by Linux