]> git.ipfire.org Git - thirdparty/iptables.git/commit
nft: Embed compat extensions in rule userdata
authorPhil Sutter <phil@nwl.cc>
Wed, 31 Jul 2024 19:28:11 +0000 (21:28 +0200)
committerPhil Sutter <phil@nwl.cc>
Thu, 10 Apr 2025 16:45:46 +0000 (18:45 +0200)
commit7746fa0b1619e1bd8465c9a98bdbead628ed428a
tree559ba739bbc398351eb9dc4577345462554fc450
parent739d9bd57ad26bd52bed569264daa97b5943e08d
nft: Embed compat extensions in rule userdata

If enabled (via --compat flag or XTABLES_COMPAT env variable), attach
any extensions for which native nftables expressions are generated to
userdata. An earlier version of the tool trying to parse the
kernel-dumped ruleset may then fall back to these extensions if native
expression parsing fails.

Signed-off-by: Phil Sutter <phil@nwl.cc>
16 files changed:
iptables/arptables-nft.8
iptables/ebtables-nft.8
iptables/iptables-restore.8.in
iptables/iptables.8.in
iptables/nft-compat.c
iptables/nft-compat.h
iptables/nft-ruleparse.c
iptables/nft.c
iptables/nft.h
iptables/xshared.c
iptables/xshared.h
iptables/xtables-arp.c
iptables/xtables-eb.c
iptables/xtables-nft.8
iptables/xtables-restore.c
iptables/xtables.c