Liping Zhang <zlpnobody@xxxxxxx> wrote: > From: Liping Zhang <liping.zhang@xxxxxxxxxxxxxx> > > Add translation for connlabel to nftables. > For examples: > > # iptables-translate -A INPUT -m connlabel --label bit40 > nft add rule ip filter INPUT ct label bit40 counter > > # iptables-translate -A INPUT -m connlabel ! --label bit40 --set > nft add rule ip filter INPUT ct label set bit40 ct label and bit40 != bit40 counter > > Signed-off-by: Liping Zhang <liping.zhang@xxxxxxxxxxxxxx> Looks good, thanks! Acked-by: Florian Westphal <fw@xxxxxxxxx> -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html