]> git.ipfire.org Git - thirdparty/nftables.git/commit
src: allow to use variables in flowtable and chain devices
authorPablo Neira Ayuso <pablo@netfilter.org>
Thu, 16 Jul 2020 12:36:28 +0000 (14:36 +0200)
committerPablo Neira Ayuso <pablo@netfilter.org>
Tue, 21 Jul 2020 12:20:18 +0000 (14:20 +0200)
commitd100e2d811749bf34bb6aeac322052c56661c124
tree4644bbd66ca3056917de47c012c87e9fa1a5c2b0
parentbde991a2e8fe012c65895a5bac8bd9ccb22ffbc4
src: allow to use variables in flowtable and chain devices

This patch adds support for using variables for devices in the chain and
flowtable definitions, eg.

 define if_main = lo

 table netdev filter1 {
    chain Main_Ingress1 {
        type filter hook ingress device $if_main priority -500; policy accept;
    }
 }

Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
src/evaluate.c
src/parser_bison.y
tests/shell/testcases/chains/0042chain_variable_0 [new file with mode: 0755]
tests/shell/testcases/chains/dumps/0042chain_variable_0.nft [new file with mode: 0644]
tests/shell/testcases/flowtable/0012flowtable_variable_0 [new file with mode: 0755]
tests/shell/testcases/flowtable/dumps/0012flowtable_variable_0.nft [new file with mode: 0644]