Re: ipsec matching in postrouting nat

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Marek Greško <mgresko8@xxxxxxxxx> wrote:
> Hello,
> 
> I would like to write rule similar to:
> 
> iptables -t nat -A POSTROUTING -o ppp0 -m policy --dir out --pol ipsec -j RETURN
> 
> in nftables. But I am not successful.
> 
> I tried:
> 
>                 oifname "ppp0" meta secpath exists return
> 
> with no luck.
> 
> Is there some equvalent of the iptables command?

Try replacing 'meta secpath' with 'rt ipsec'



[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux