Change data type of fib oifname from "string" to "ifname", so that it
can be matched against a set of ifnames:
set x {
type ifname
}
chain y {
fib saddr oifname @x drop
}
Signed-off-by: Xiao Liang <shaw.leon@gmail.com>
Signed-off-by: Florian Westphal <fw@strlen.de>
|Keyword| Description| Result Type
|oif|
Output interface index|
-integer (32 bit)
+iface_index
|oifname|
Output interface name|
-string
+ifname
|type|
Address type |
fib_addrtype (see *nft* *describe* *fib_addrtype* for a list)
type = &ifindex_type;
break;
case NFT_FIB_RESULT_OIFNAME:
- type = &string_type;
+ type = &ifname_type;
len = IFNAMSIZ * BITS_PER_BYTE;
break;
case NFT_FIB_RESULT_ADDRTYPE:
chain c {
iifname @s accept
oifname @s accept
+ fib saddr oifname @s accept
tcp dport . meta iifname @sc accept
meta iifname . meta mark @nv accept
}
chain c {
iifname @s accept
oifname @s accept
+ fib saddr oifname @s accept
tcp dport . iifname @sc accept
iifname . meta mark @nv accept
}