Use ipset and conntrack with nftables

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hi Guys,

What would be the nftables equivalent for this rule:
iptables -D FORWARD -m conntrack --ctorigsrc 172.5.1.123 --ctproto tcp
-j MARK --set-mark 123

Also how can such a rule be made for a collection of different
ip-addresses in an ipset.

So as an example: 172.5.1.123, 172.5.1.124, 172.5.1.125, 172.5.1.126
all these ips are part of an ipset called 'myset'

How can a rule like mentioned above be applied to a collection of ips
denoted by an ipset 'myset'?

Thanks
Amiq



[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux