iptables-nft lacks a translate variant for arptables. Add it. First patch fixes a bug in existing arptables-nft, second patch adds missing mask matching. Patch 3 is the main arptables-translate support. Last patch adds a few test cases. Florian Westphal (4): arptables-nft: use ARPT_INV flags consistently nft-arp: add missing mask support nft-arp: add arptables-translate arptables-txlate: add test cases extensions/generic.txlate | 6 + extensions/libarpt_mangle.c | 47 +++++++ extensions/libarpt_mangle.txlate | 6 + iptables/nft-arp.c | 230 +++++++++++++++++++++++++++---- iptables/nft-ruleparse-arp.c | 24 ++-- iptables/xtables-multi.h | 1 + iptables/xtables-nft-multi.c | 1 + iptables/xtables-translate.c | 35 ++++- xlate-test.py | 2 +- 9 files changed, 312 insertions(+), 40 deletions(-) create mode 100644 extensions/libarpt_mangle.txlate -- 2.41.0
