Re: Combine ipv4 and ipv6 in a set

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 




Le 30/01/2024 à 13:13, Daniel a écrit :

Le 30/01/2024 à 11:39, Kerin Millar a écrit :
On Tue, 30 Jan 2024, at 10:17 AM, Daniel wrote:
Hi,

nft 1.06 Debian12. Is it possible in a set to combine ipv4 and ipv6 ? If
not, does it exist another method to do this ?
Combining is impossible. However, the value of an ipv6_addr element is permitted to be an IPv4-mapped IPv6 address.

As simple it is, thanks.

I have a question: if I want to check a source ipv4 address against a mapped ipv4, how to configure the rule ? I get a datatype mismatch as the set is of type addr_ipv6

add rule inet filter input ip saddr @reaction-banned-ips drop is not accepted.




[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux