Add action to "finally" accept packets?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



OpenWrt switched to nftables in its firewall4 implementation [0]. Now people start porting their custom iptables rules to nft. However, there is a lack of "finally" accepting a packet without traversing the other chains with the same hook type and later priority in the same table [1,2]. Jumping/GoTo statements do not help [3]. Is it possible to add an action/policy allowing us to stop traversing the table?

[0] - https://git.openwrt.org/project/firewall4.git
[1] - https://github.com/openwrt/openwrt/issues/9981
[2] - https://wiki.nftables.org/wiki-nftables/index.php/Configuring_chains
[3] - https://wiki.nftables.org/wiki-nftables/index.php/Jumping_to_chain




[Index of Archives]     [Netfitler Users]     [Berkeley Packet Filter]     [LARTC]     [Bugtraq]     [Yosemite Forum]

  Powered by Linux