On Sat, Jul 30, 2016 at 01:20:59PM +0800, Liping Zhang wrote: > From: Liping Zhang <liping.zhang@xxxxxxxxxxxxxx> > > In iptables, "-i eth+" means match all in ifname with the prefix "eth". > But in nftables, this was changed to "iifname eth*". So we should handle > this subtle difference. > > Apply this patch, translation will become: > # iptables-translate -A INPUT -i eth+ > nft add rule ip filter INPUT iifname eth* counter > # ip6tables-translate -A OUTPUT ! -o eth+ > nft add rule ip6 filter OUTPUT oifname != eth* counter Applied, thanks. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
