Matching daddr and saddr in single rule?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hello,
i'd like to drop all traffic that is related to address. is there way to merge these two rules:

nft add rule ip filter output ip daddr 1.2.3.4 counter drop
nft add rule ip filter output ip saddr 1.2.3.4 counter drop

to single rule like this:

nft add rule ip filter output ip addr 1.2.3.4 counter drop

i think this would be quite useful to simplify my rule set. especialy when handling vast amount of addresses.

Thanks.


--
S pozdravem
Best regards
     Tomáš Mudruňka - SPOJE.NET s.r.o.
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html



[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux