]> git.ipfire.org Git - thirdparty/iptables.git/commit
extensions: libxt_sctp: Add translation to nft
authorShivani Bhardwaj <shivanib134@gmail.com>
Wed, 2 Mar 2016 19:28:48 +0000 (00:58 +0530)
committerPablo Neira Ayuso <pablo@netfilter.org>
Thu, 3 Mar 2016 12:22:33 +0000 (13:22 +0100)
commitdefc7bd2bac89aab8f12929f264241e4583ec21c
treee193c21091b72c9c6098365b19068962eae9fad7
parent3d7d1afe43f6fb1e466671c8d2ce7517079b466a
extensions: libxt_sctp: Add translation to nft

Add translation for sctp to nftables.
Full translation of this match awaits the support for --chunk-types
option.

Examples:

$ sudo iptables-translate -A INPUT -p sctp --dport 80 -j DROP
nft add rule ip filter INPUT sctp dport 80 counter drop

$ sudo iptables-translate -A INPUT -p sctp ! --sport 80:100 -j ACCEPT
nft add rule ip filter INPUT sctp sport != 80-100 counter accept

Signed-off-by: Shivani Bhardwaj <shivanib134@gmail.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
extensions/libxt_sctp.c