Liping Zhang <zlpnobody@xxxxxxx> wrote: > From: Liping Zhang <liping.zhang@xxxxxxxxxxxxxx> > > Add translation for connlabel to nftables. > For examples: > > # iptables-translate -A INPUT -m connlabel --label bit40 > nft add rule ip filter INPUT ct label bit40 counter > > # iptables-translate -A INPUT -m connlabel ! --label bit40 --set > nft add rule ip filter INPUT ct label set bit40 ct label != bit40 counter Should probably be: ... ct label and bit40 != bit40 ... != bit40 will be true if bit40 and another bit is set. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
