Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx> wrote: > Unlike in iptables, in nftables we don't know the expected l4 protocol > at rule setup time. > > In the iptables<->nftables compat layer, we have an expression > attribute which is filled from userspace with the l4 protocol > (NFTA_RULE_COMPAT_PROTO). > > Not sure if it's worth adding a new netlink attribute for nft_nat to > tell the expression about the expected l4 NAT protocol. Right, it might more sense to handle this in nft frontend instead. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
