]> git.ipfire.org Git - thirdparty/iptables.git/commit
extensions: libxt_NFQUEUE: Add translation to nft
authorShivani Bhardwaj <shivanib134@gmail.com>
Tue, 9 Feb 2016 08:53:10 +0000 (14:23 +0530)
committerPablo Neira Ayuso <pablo@netfilter.org>
Tue, 16 Feb 2016 18:30:25 +0000 (19:30 +0100)
commit3bc0951c107c5da741a330ba5df49a2c823f5e5d
tree37dfa313f31bbbd5404e94b59a082719cc1ef97f
parent5d9c5a3559f3abe922d9a51b966e459d30ffb355
extensions: libxt_NFQUEUE: Add translation to nft

Add translation for NF queue to nftables.

Examples:

$ sudo iptables-translate -t nat -A PREROUTING -p tcp --dport 80 -j NFQUEUE --queue-num 30
nft add rule ip nat PREROUTING tcp dport 80 counter queue num 30

$ sudo iptables-translate -A FORWARD -j NFQUEUE --queue-num 0 --queue-bypass -p TCP --sport 80
nft add rule ip filter FORWARD tcp sport 80 counter queue num 0 bypass

$ sudo iptables-translate -A FORWARD -j NFQUEUE --queue-bypass -p TCP --sport 80 --queue-balance 0:3 --queue-cpu-fanout
nft add rule ip filter FORWARD tcp sport 80 counter queue num 0-3 bypass,fanout

Signed-off-by: Shivani Bhardwaj <shivanib134@gmail.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
extensions/libxt_NFQUEUE.c