]> git.ipfire.org Git - thirdparty/nftables.git/commit
src: Allow goto and jump to a variable
authorFernando Fernandez Mancera <ffmancera@riseup.net>
Fri, 24 May 2019 13:06:50 +0000 (15:06 +0200)
committerPablo Neira Ayuso <pablo@netfilter.org>
Fri, 24 May 2019 19:56:23 +0000 (21:56 +0200)
commitc64457cff9673fbb41f613a67e158b4d62235c09
tree7078630dcce460d3c412d541517230895832812c
parentf1e8a129ee428419a0d5a45a2f410e8e4008d109
src: Allow goto and jump to a variable

This patch introduces the use of nft input files variables in 'jump' and 'goto'
statements, e.g.

define dest = ber

add table ip foo
add chain ip foo bar {type filter hook input priority 0;}
add chain ip foo ber
add rule ip foo ber counter
add rule ip foo bar jump $dest

table ip foo {
        chain bar {
                type filter hook input priority filter; policy accept;
                jump ber
        }

        chain ber {
                counter packets 71 bytes 6664
        }
}

Signed-off-by: Fernando Fernandez Mancera <ffmancera@riseup.net>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
src/datatype.c
src/evaluate.c
src/parser_bison.y
tests/shell/testcases/nft-f/0018jump_variable_0 [new file with mode: 0755]
tests/shell/testcases/nft-f/0019jump_variable_1 [new file with mode: 0755]
tests/shell/testcases/nft-f/0020jump_variable_1 [new file with mode: 0755]
tests/shell/testcases/nft-f/dumps/0018jump_variable_0.nft [new file with mode: 0644]