Re: Using Map/Set from different table

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Zheng konia <konianet@xxxxxxxxx> wrote:
> Hi,
> 
>     Since Nftables using map/set to collect ip port and others. Is it
> possible using map or set from different table ?  Like the example
> bellow
> 
>     table ip a {
>                set local_addr {
>                type ipv4_addr
>                 flags interval
>                 elements = { 192.168.0.1, 10.1.1.1 }
>               }
>     }
> 
>      table ip b {
>              chain input {
>                   type filter hook input priority 300; policy accept;
>                   ip saddr a@ local_addr accept
>                   reject
>                 }
>         }

No, sets are scoped by the table they are contained within, so that
different tables can operate without clashing names.



[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux