From: Florian Westphal Date: Fri, 26 Jan 2018 13:27:12 +0000 (+0100) Subject: doc: dup and fwd statements X-Git-Tag: v0.8.2~2 X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=c38485441f4c153f28d2176e9ce17691244a3849;p=thirdparty%2Fnftables.git doc: dup and fwd statements Signed-off-by: Florian Westphal Signed-off-by: Pablo Neira Ayuso --- diff --git a/doc/nft.xml b/doc/nft.xml index 6a95ea68..d5b9c27c 100644 --- a/doc/nft.xml +++ b/doc/nft.xml @@ -5000,6 +5000,86 @@ add rule nat prerouting tcp dport 22 redirect to :2222 + + Dup statement + + The dup statement is used to duplicate a packet and send the copy to a different destination. + + + + dup + to + device + + + dup + to + address + device + device + + + + + Dup statement values + + + + + + + Expression + Description + Type + + + + + address + Specifies that the copy of the packet should be sent to a new gateway. + ipv4_addr, ipv6_addr, eg. abcd::1234, or you can use a mapping, eg. ip saddr map { 192.168.1.2 : 10.1.1.1 } + + + device + Specifies that the copy should be transmitted via device. + string + + + +
+ + + + Using the dup statement + +# send to machine with ip address 10.2.3.4 on eth0 +ip filter forward dup to 10.2.3.4 device "eth0" + +# copy raw frame to another interface +netdetv ingress dup to "eth0" +dup to "eth0" + +# combine with map dst addr to gateways +dup to ip daddr map { 192.168.7.1 : "eth0", 192.168.7.2 : "eth1" } + + + + + + Fwd statement + + The fwd statement is used to redirect a raw packet to another interface. Its is only available in the netdev family ingress hook. + It is similar to the dup statement except that no copy is made. + + + + fwd + to + device + + + +